Security & Compliance Leader — SOC 2 & IT Ops

Enboarder; New York (NY); Hybrid; USD 150,000 - 210,000; Full time

Job summary

Slang AI seeks a senior Compliance & Security Manager to own SOC 2 program, risk registry, and IT operations. You’ll supervise security policies, perform audits, and coordinate vendor reviews while managing day-to-day IT like Google Workspace, SSO, and staff provisioning across multiple SaaS tools.

This role blends compliance discipline with hands-on IT operations. The ideal candidate brings 7+ years in IT/security/compliance, SOC 2 experience, and strong policy writing.

Qualifications

• 7+ years of IT administration, security, and compliance experience.
• Bachelors or Masters degree in cybersecurity, IT, IS, CS, or related field.
• Nationally recognized cybersecurity certifications (Security+, PenTest+, CASM, CISSP or equivalent).
• Direct experience with SOC 2 audits, evidence collection, control mapping, and auditor coordination.
• Hands-on experience with Google Workspace or Microsoft 365 administration.
• Experience with IAM, including SSO configuration and provisioning/deprovisioning across multiple SaaS platforms.
• Experience with Okta/OneLogin/Rippling/JumpCloud.
• Experience maintaining a risk registry and driving remediation processes.
• Familiarity with Drata, Vanta, or similar automation platforms.
• Experience coordinating penetration tests and remediation of findings.
• Strong policy and security documentation writing.
• Ability to manage multiple compliance, security, and IT workstreams independently.

Responsibilities

• Own and maintain security and compliance programs including SOC 2 readiness and auditor coordination.
• Maintain and update security policies reflecting regulatory needs.
• Maintain the risk registry with mitigations and timelines.
• Plan and execute regular compliance activities and drills.
• Coordinate annual penetration tests and remediate findings.
• Review vendor security via SOC 2 reports and DPA.
• Monitor security events and coordinate incident response.
• Improve automation workflows in Drata for audit efficiency.
• Recommend security tooling improvements as needs evolve.
• Deliver security awareness training for staff.
• Administer Google Workspace including security configurations (DLP, context-aware access).
• Manage staff provisioning/deprovisioning across SaaS via Rippling and Google Workspace.
• Set up and maintain SSO connections across tools; troubleshoot auth issues.
• Handle IT onboarding/offboarding from security perspective; device provisioning and access revocation.
• Conduct periodic access audits; verify deprovisioning across systems.
• Respond to IT help requests via Slack; document escalations.
• Onboarding/offboarding staff from IT security perspective.

Skills

IT Administration

Security & Compliance

SOC 2 Audits

IAM

Google Workspace

SSO Configuration

Policy Writing

Risk Registry

Incident Response

Security Training

Education

Bachelors or Masters in CS/IT/Cybersecurity

Cybersecurity Degree

Tools

Okta

OneLogin

Rippling

JumpCloud

Drata

Vanta

Google Workspace

Job description

Slang AI seeks a senior Compliance & Security Manager to own SOC 2 program, risk registry, and IT operations. You’ll supervise security policies, perform audits, and coordinate vendor reviews while managing day-to-day IT like Google Workspace, SSO, and staff provisioning across multiple SaaS tools.

This role blends compliance discipline with hands-on IT operations. The ideal candidate brings 7+ years in IT/security/compliance, SOC 2 experience, and strong policy writing.