Security & Compliance Engineer: ISO 27001 & SOC 2 Expert

Volta; Palo Alto (CA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

Equity in Volta

Health, wellbeing and insurance

Retirement contributions

Generous vacation days

Job summary

Volta in Palo Alto is seeking an information security professional focused on compliance and audit readiness. You will implement controls, maintain evidence, and support audits across ISO 27001, SOC 2 Type II, and regulatory obligations.

Work with engineering to translate control requirements into actionable tasks, automate evidence collection, and prepare responses to customer security questionnaires. This role collaborates across teams and contributes to Volta’s growing security program.

Qualifications

• 3+ years in information security with a focus on compliance, GRC, or audit-facing work.
• Hands-on experience with ISO 27001 or SOC 2 programs, including evidence prep and supporting external audits.
• Knowledge of technical controls in cloud/infrastructure environments and ability to read system designs.
• Experience with GRC platforms such as Vanta/Drata and maintaining integrations, not just dashboards.
• Strong writing for evidence, procedures, and customer-facing responses.
• Organized with strong ownership and timely follow-through, collaborating with engineers.

Responsibilities

• Implement and maintain controls for ISO 27001 and SOC 2 Type II programs; track status, owners, and gaps.
• Operate the GRC platform day-to-day: configure integrations, monitor checks, resolve drift.
• Collect, organize, and quality-check evidence for auditors.
• Maintain ISMS documentation and support internal audit with needed data.
• Support risk and third-party assessments, and docent corrective actions.

Skills

Information security

Compliance

GRC

Audit experience

ISO 27001 / SOC 2

Vendor risk

Tools

Vanta

Drata

Job description

Volta in Palo Alto is seeking an information security professional focused on compliance and audit readiness. You will implement controls, maintain evidence, and support audits across ISO 27001, SOC 2 Type II, and regulatory obligations.

Work with engineering to translate control requirements into actionable tasks, automate evidence collection, and prepare responses to customer security questionnaires. This role collaborates across teams and contributes to Volta’s growing security program.