Security & Compliance Lead for Enterprise Audits

Remote Worker LTD.; United States; Remote; USD 130,000 - 170,000; Full time

Job summary

Duvo is building an AI operations platform for enterprise customers. This role is sole-occupant and reports to the Head of Engineering and Security Lead. You own the security questionnaire, evidence, and Trust Center configuration.

You will drive security reviews, manage audits, and maintain ISMS, vendor policy, and subprocessor risk across the business. You will ensure timely, demonstrable answers for auditors and customers.

Qualifications

• End-to-end certification program experience with SOC 2 and ISO 27001.
• Ability to write precise, evidenced answers for audits.
• Experience with third-party risk and vendor reviews.
• Evidence-driven mindset targeting nine-month auditor questions.
• Judgement on escalation to Eng, Security, or Legal.

Responsibilities

• Own the Q&A library mapped to ISO 27001, SOC 2, ISO 42001, NIS2, GDPR.
• Manage customer security reviews and intake to delivery.
• Lead the audit and certification programme including renewal cycles.
• Maintain ISMS and policy lifecycle with the Security Lead.
• Oversee third-party and subprocessor risk management.

Skills

Certification program management

Evidence-based writing

Vendor risk management

Auditing experience

AI tooling proficiency

Plain writing

Tools

Vanta

Drata

Mycroft

Segregato

Job description

Duvo is building an AI operations platform for enterprise customers. This role is sole-occupant and reports to the Head of Engineering and Security Lead. You own the security questionnaire, evidence, and Trust Center configuration.

You will drive security reviews, manage audits, and maintain ISMS, vendor policy, and subprocessor risk across the business. You will ensure timely, demonstrable answers for auditors and customers.