Security and Compliance Manager

nOps; United States; Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Remote‑friendly culture

Competitive compensation

Growth opportunities

Job summary

nOps is a leading FinOps platform helping engineering and finance teams gain real‑time cloud cost visibility and optimization. We seek a Security and Compliance Manager to own security programs, lead SOC 2, and drive governance across RBAC, IAM, and cloud environments.

You will partner with Sales on customer security reviews and build training programs, while aligning with HR, Finance, and Engineering to keep documentation current. Remote‑first with growth opportunities.

Qualifications

• SOC 2 audit experience from prep to completion.
• Strong knowledge of GDPR and CCPA in practice.
• RBAC and IAM design, including SSO and directory services.
• Cloud security know‑how on AWS, Azure, GCP; coord. pen tests & vuln mgmt.
• Excellent written and verbal communication; able to explain security to executives and engineers.

Responsibilities

• Own security and compliance programs and improve processes.
• Manage SOC 2 end‑to‑end with auditors and stay audit‑ready.
• Maintain GDPR/CCPA compliance and ensure policy adherence.
• Design and maintain RBAC across apps and clouds.
• Coordinate penetration testing and remediation with engineering.
• Develop security awareness and compliance training with tracking.

Skills

SOC 2 audit

GDPR/CCPA knowledge

RBAC design

IAM / SSO

Cloud security

Communication

Documentation

Security certifications (nice to have)

Tools

SSO

Directory services

Vulnerability management tools

Job description

nOps is the leading FinOps platform for AWS, Azure, and GCP, helping engineering and finance teams gain real-time cloud cost visibility and achieve autonomous optimization. Our mission is to make cloud cost management effortless, enabling teams to scale innovation without waste. We partner closely with the major hyperscalers and our customers to continuously improve how organizations optimize, manage, and invest in their cloud environments.

The Role

We are looking for a Security and Compliance Manager to take ownership of security and compliance at nOps. You will step into our current programs, keep them running without a gap, and then improve or rebuild any process you think should be stronger. You will also take on core IT administration and act as a confident voice for our security posture with enterprise customers.

What You'll Do

Security and Compliance

• Take ownership of our existing security and compliance programs, and update or rebuild any process you believe can be stronger.
• Own our SOC 2 program end to end, from evidence collection to working with auditors, and keep us continuously audit-ready.
• Maintain compliance with GDPR and CCPA, and confirm our policies are followed in practice.
• Design and maintain role-based access control (RBAC) across our applications and cloud environments, so every person has the access their role requires and no more.
• Manage penetration testing and vulnerability monitoring, and track remediation with engineering.
• Build and run security awareness and compliance training, with clear tracking and sign-off.
• Partner with Sales on customer security reviews and questionnaires, and join customer calls to present our security posture.
• Meet cloud marketplace security requirements as we expand our listings.
• Keep security documentation and architecture diagrams current, working closely with HR, Finance, and Engineering.

IT Administration

• Administer core IT systems, including identity, single sign-on, and user access to company tools.
• Own IT onboarding and offboarding with HR: set up access by role, remove it promptly, and keep user records and distribution lists accurate.

Compliance Frameworks and Regulations

• SOC 2 (required)
• GDPR (required)
• CCPA (required)
• Cloud marketplace security requirements for AWS, Azure, and GCP (helpful)

What You'll Bring

• Hands‑on experience owning compliance programs, including leading a SOC 2 audit from preparation through completion.
• Strong knowledge of GDPR and CCPA and how to put them into practice.
• Experience designing and implementing RBAC and identity and access management, including single sign‑on and directory services.
• Working knowledge of cloud security, ideally on AWS, Azure, and GCP, and experience coordinating penetration testing and vulnerability management.
• Comfort with day‑to‑day IT administration, such as user accounts and access requests.
• Excellent communication skills. You can explain security and compliance clearly to engineers, executives, and non‑technical colleagues, and speak with confidence to enterprise customers.
• Rigorous about documentation and evidence.
• A security certification such as CISSP, CCEP, or an AWS certification is a plus.
• Located in the United States or Canada.
• Comfortable working remote‑first with a growing team, and willing to build and improve processes.

Why nOps

• Join a fast‑growing company at the center of innovation in the FinOps space.
• Own security and compliance and build the program the way you think it should be run.
• Competitive compensation and opportunity to grow professionally.
• Remote‑friendly team with a strong culture of ownership, collaboration, and continuous learning.