Security & Compliance Lead: ISO 27001 & SOC 2

Archlet; United States; Remote; USD 150,000 - 210,000; Full time

Job summary

Archlet is seeking a security and compliance leader to own the daily execution of security, privacy, and audits. You will work directly with the CTO/CISO to drive ISO 27001 readiness, coordinate SOC 2 Type II programs, and extend our Vanta setup with proper documentation and evidence.

You’ll partner with engineering on cloud security, data governance, vendor risk, and AI governance, while communicating clearly with customers and leaders in English.

Qualifications

• 5+ years in information security, security compliance, or GRC with substantial SaaS/cloud responsibilities.
• Independently managed ISO 27001 audit cycles and delivered SOC 2 Type II results.
• Deep understanding of cloud architecture, authentication/authorization, least privilege, logging, and vulnerabilities.
• Experience with GDPR compliance, DPAs, privacy assessments, and vendor risk.
• Excellent written and spoken English with stakeholder management skills.

Responsibilities

• Own daily security/compliance execution with CTO/CISO; balance audits, customer requests, and improvements.
• Lead SOC 2 Type II project lifecycle and ongoing program.
• Be first point of contact for security/compliance questions across the company and with customers.
• Maintain risk registers and subprocessor information; drive GDPR compliance.
• Coordinate annual penetration testing and remediation with engineering teams.
• Collaborate on cloud security, access reviews, and security configurations across products.
• Create practical security trainings and automate evidence collection and reviews.

Skills

Security governance

ISO 27001

SOC 2

Cloud security

Vendor risk

Audit readiness

Customer communication

Program management

Education

Bachelor's in CS/IS

Tools

Azure

Entra ID

Intune

Microsoft Defender

Vanta

Job description

Archlet is seeking a security and compliance leader to own the daily execution of security, privacy, and audits. You will work directly with the CTO/CISO to drive ISO 27001 readiness, coordinate SOC 2 Type II programs, and extend our Vanta setup with proper documentation and evidence.

You’ll partner with engineering on cloud security, data governance, vendor risk, and AI governance, while communicating clearly with customers and leaders in English.