Security & Compliance Program Lead

Speedrun Talent Network; San Francisco (CA); On-site; USD 150,000 - 230,000; Full time

Job summary

Anyscale Inc. is seeking a senior Compliance Program Lead to own the end-to-end governance, risk, and compliance program, including SOC 2 Type II, ISO 27001, and regulatory diligence for enterprise customers.

You will manage the evidence base, risk register, and security diligence required by contracts, working across engineering, IT, legal, and sales, with autonomy and accountability as the single owner of compliance.

Qualifications

• 7+ years in governance, risk, and compliance, ideally at a high-growth startup.
• Ownership of SOC 2 and ISO 27001 programs end-to-end with external auditors.
• Experience fronting security diligence for enterprise or regulated customers.
• Fluent with compliance automation platforms and turning tooling into audit-ready evidence.
• Strong understanding of cloud and SaaS security controls.

Responsibilities

• Own SOC 2 Type II and ISO 27001 programs from scope to audit.
• Complete the control evidence base in the compliance automation platform.
• Lead security diligence for enterprise and regulated customers.
• Own and mature the risk register and risk management program.
• Coordinate the compliance obligations in partnership with legal.
• Assess and stand up new certifications as the pipeline requires.
• Collaborate with engineering and IT to integrate evidence collection into operations.

Skills

GRC ownership

SOC 2 & ISO 27001

Enterprise security diligence

Compliance automation (Vanta)

Cloud & SaaS security

Independent program ownership

Tools

Vanta

Job description

Anyscale Inc. is seeking a senior Compliance Program Lead to own the end-to-end governance, risk, and compliance program, including SOC 2 Type II, ISO 27001, and regulatory diligence for enterprise customers.

You will manage the evidence base, risk register, and security diligence required by contracts, working across engineering, IT, legal, and sales, with autonomy and accountability as the single owner of compliance.