Security & Compliance Specialist

Midwest Startups; Fort Wayne (IN); On-site; USD 60,000 - 100,000; Full time

Job summary

An exciting opportunity awaits a driven Security & Compliance Specialist to join a fast-growing SaaS startup. In this role, you'll own and manage compliance frameworks, including SOC 2 and GDPR, while collaborating with various teams to ensure high levels of security and risk management. You'll lead initiatives for obtaining additional certifications, manage vendor relationships, and develop robust security practices. This innovative firm is dedicated to creating a positive work environment and offers competitive compensation, healthcare, stock options, and unlimited vacation. If you're passionate about compliance and security, this role is perfect for you!

Benefits

Healthcare

Stock options

401k

Unlimited vacation

Flexible work environment

Qualifications

• 2-5 years of experience managing compliance frameworks like SOC 2 and GDPR.
• Strong project management skills and ability to coordinate across teams.

Responsibilities

• Manage compliance frameworks and lead initiatives for further certifications.
• Collaborate with teams to maintain and update compliance policies.

Skills

Compliance Framework Management

Project Management

Communication Skills

Risk Assessment

Security Practices Development

Tools

AWS

Okta

Compliance Management Software

Job description

Security & Compliance Specialist

Workshop is looking for a driven Security & Compliance Specialist to own our current and future compliance frameworks and collaborate with stakeholders to make sure we are upholding our high level of security and risk management.

This is an exciting opportunity for someone with 2-5 years of experience to be part of an exciting software-as-a-service (SaaS) business here in Omaha, Nebraska.

As a Security & Compliance Specialist, you will:

• Own and manage our existing compliance frameworks, including SOC 2 and GDPR.
• Lead our initiative to obtain further compliance certifications such as ISO27001, coordinating all necessary audits, documentation, and risk assessments.
• Collaborate with revenue teams to manage inbound customer vendor and security questionnaires and incorporate prospective security conversations into future compliance & security roadmaps.
• Collaborate with internal stakeholders and legal counsel to maintain and update MSAs, terms of service, privacy policies, and acceptable use policies.
• Develop, implement, and manage comprehensive third-party vendor vetting and approval processes.
• Partner with our product and engineering teams to validate, schedule, and document disaster recovery and security tests.
• Implement rigorous tracking and management processes for vendor access and user controls across internal and external platforms, collaborating closely with business stakeholders and IT.

To be successful in this position, you’ll need to:

• Have proven experience managing compliance frameworks, especially SOC 2, GDPR, and ISO 27001.
• Demonstrate strong project management skills with a clear ability to coordinate cross-functionally across legal, product, engineering, and IT teams.
• Possess excellent written and verbal communication skills, translating complex security and compliance requirements clearly across teams.
• Have experience developing and maintaining compliance policies and documentation.
• Be proactive in identifying risks and developing robust security practices that align with business goals.

Bonus points if you:

• Have hands-on experience with disaster recovery planning and testing.
• Have managed relationships with external auditors and vendors.
• Have direct experience working with cloud based hosting environments such as AWS and identity management tools such as Okta.
• Are familiar with compliance management software and access control systems.
• Enjoy working in fast-paced startup environments.

Compensation and benefits:

• Highly competitive compensation
• Healthcare
• Stock options
• 401k
• Unlimited vacation
• Flexible work environment

About Workshop

Workshop is a fast growing, venture-backed startup based in Omaha, Nebraska and we’re on a mission to create more happy Mondays for employees everywhere. We build software to help internal communications teams create, send, and measure multi-channel, employee-centric campaigns.

Apply for this role