SaaS Security & Compliance Lead (SOC 2)

Advanced Operations Partners; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

Advanced Operations Partners is seeking a Senior Security & Compliance Engineer to lead the design, implementation, and ongoing improvement of the information security program in a SOC 2 Type II SaaS environment.

You will serve as the primary technical resource for security operations, vulnerability management, incident response, audits, and governance, partnering with infrastructure and application teams to strengthen security and meet customer and regulatory expectations.

Qualifications

• 7+ years of information security experience.
• Background in security engineering or security operations.
• Experience supporting SOC 2, ISO 27001, or similar frameworks.
• Knowledge of vulnerability management, SIEM, endpoint security, and IAM concepts.
• Strong written and verbal communication skills.

Responsibilities

• Lead security operations and monitoring with MSSPs and VARs.
• Manage vulnerability management and remediation programs.
• Support incident response, investigation, and recovery efforts.
• Administer security tools including SIEM, EDR, email security, scanners and IAM platforms.
• Develop and maintain security policies, standards and procedures.
• Coordinate audit activities and evidence collection.
• Conduct risk assessments and security reviews.
• Support customer security questionnaires and due diligence requests.
• Monitor compliance with security controls and regulatory requirements.
• Partner with infrastructure and application teams to strengthen security posture.
• Participate in change management reviews and security assessments.

Skills

Information security

Security operations

Vulnerability management

Incident response

SOC 2

ISO 27001

Tools

SIEM

EDR

Vulnerability scanners

Identity platforms

Job description

Advanced Operations Partners is seeking a Senior Security & Compliance Engineer to lead the design, implementation, and ongoing improvement of the information security program in a SOC 2 Type II SaaS environment.

You will serve as the primary technical resource for security operations, vulnerability management, incident response, audits, and governance, partnering with infrastructure and application teams to strengthen security and meet customer and regulatory expectations.