Security & Compliance Manager - SOC 2, ISO 27001

Augmodo; San Francisco (CA); On-site; USD 125,000 - 165,000; Full time

Benefits offered by this job

Medical, dental, vision

401k with company match

Equity

Job summary

Augmodo is seeking a Compliance & IT Manager to own and scale our compliance, security, privacy, and IT programs in a fast-growing startup. You will lead SOC 2, drive ISO 27001 readiness, and partner with Engineering on security controls and incident response.

You will manage access controls, IT asset lifecycle, and privacy documentation across the company, while ensuring regulatory alignment with GDPR and EU AI Act requirements.

Qualifications

• 4+ years in compliance, information security, IT, or privacy.
• Hands-on with SOC 2 and preferably ISO 27001.
• Working knowledge of GDPR, privacy, and AI governance (EU AI Act).
• Understanding of access management, endpoint security, IT operations, and security fundamentals.

Responsibilities

• Own and maintain the SOC 2 compliance program, including controls, evidence collection, audits, and remediation.
• Lead ISO 27001 certification readiness, including ISMS, risk assessments, policies, controls, and audit prep.
• Maintain GDPR, privacy, and EU AI Act documentation and compliance processes.
• Manage system access controls, provisioning, access reviews, and offboarding.
• Own IT asset lifecycle, including procurement, provisioning, inventory, licensing, renewals, access, deprovisioning.
• Partner with Engineering and Infrastructure on security controls and incident response.

Skills

SOC 2

ISO 27001

GDPR/Privacy

Access management

IT operations

Security fundamentals

Cross-functional collaboration

Vanta

Tools

Vanta

Google Workspace

Cloud infrastructure

MDM

Job description

Augmodo is seeking a Compliance & IT Manager to own and scale our compliance, security, privacy, and IT programs in a fast-growing startup. You will lead SOC 2, drive ISO 27001 readiness, and partner with Engineering on security controls and incident response.

You will manage access controls, IT asset lifecycle, and privacy documentation across the company, while ensuring regulatory alignment with GDPR and EU AI Act requirements.