Security Governance & Compliance Manager

Field Nation; Minnesota; On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Unlimited PTO

Vacation bonus

401K

Job summary

Field Nation is seeking a Security Governance & Compliance Manager to lead our governance, risk, and compliance programs. You will own SOC 2 Type II, drive ISO 27001 certification from scratch, and oversee AI governance across our product and internal operations.

You will manage policy, risk, and third‑party governance and serve as the main liaison for security questionnaires and audits. A distributed team and automation strategy are core parts of the role.

Qualifications

• Led ISO 27001 implementation through certification.
• Built SOC 2 Type II program or completed 27001 gap analysis with credible results.
• Managed compliance/GRC programs for enterprise customers and responded to security questionnaires.
• Managed security, GRC, or compliance professionals across time zones and hiring needs.

Responsibilities

• Own the SOC 2 Type II program end to end: control operation, evidence collection, auditor relationship, and reporting.
• Lead ISO 27001 from scratch to certification: scope ISMS, remediate gaps, select auditor, achieve certification.
• Own AI governance across the company: AI in product and marketplace, AI inventory, risk register, usage policy, ISO 42001 readiness.
• Own policy, risk, and third-party governance: policy/standards lifecycle, risk register, vendor/third-party risk assessments, security awareness training.
• Serve as primary point of contact for customer security questionnaires and internal audits.
• Set governance standard for identity and access: access reviews, joiner/mover/leaver process, audit-trail integrity.
• Build and lead a distributed team: oversee two direct reports in Bangladesh, hire and set execution standards.
• Direct compliance automation strategy: collaborate with GRC engineer to determine what to automate and ensure controls are enforced.

Skills

Security governance

Compliance management

SOC 2

ISO 27001

AI governance

Vendor risk

Team leadership

Audit coordination

Job description

Who we are:

Field Nation brings companies and service professionals together through an integrated, easy-to-use platform. We support businesses looking to grow their service offerings while also empowering technicians to leverage their skills on their own terms. Our mission is to help the service delivery industry do great work, and we live that mission by doing great work for the companies and service professionals that depend on us.

Why this role is important to Field Nation

Field Nation’s Information Security team works across the Technology organization to run and continuously improve our security, risk, and compliance programs. As Security Governance & Compliance Manager you will report to the Director, Information Security & Cloud Platforms and lead a small security team, owning our governance, risk, and compliance program end to end — SOC 2 today, ISO 27001 and ISO 42001 ahead of us, identity governance, vendor risk, and the governance of AI across both our product and our own operations.

What you'll get to do

• Own the SOC 2 Type II program:Run the annual cycle end to end - control operation, evidence collection, the auditor relationship, and the report our customers rely on. This is Field Nation's core compliance commitment today.
• Lead ISO 27001 from scratch to certification: Scope the ISMS, remediate gaps, select an auditor, and achieve certification. This is a greenfield initiative and a first-year priority, driven by enterprise customer demand.
• Own AI governance across the company:Cover both the AI embedded in our product and marketplace and the AI adopted internally. Maintain the AI inventory and risk register, set usage policy, and drive readiness for ISO 42001 following the 27001 certification.
• Own policy, risk, and third-party governance: Manage the policy and standards lifecycle, the risk register, vendor and third-party risk assessments, and security awareness training. Serve as the primary point of contact for customer security questionnaires and internal audits.
• Set the governance standard for identity and access: Own access review cadence, joiner-mover-leaver process design, and audit-trail integrity. While day-to-day access operations sit with partner teams, this role holds the policy, risk, and measurement standard to ensure Field Nation maintains one coherent access posture.
• Build and lead a distributed team: Oversee two direct reports based in Bangladesh. Hire, develop, and set the standard for program execution as the team grows.
• Direct compliance automation strategy: Partner with a GRC engineer who builds the automation; determine what's worth automating and validate that each automated control enforces what it claims to.
• Share in security escalation response. Participate in a team-based escalation rotation alongside the Director and other US staff. Managed detection filters routine noise, so escalations represent genuine signals.

You might be a good fit if you have:

• You've personally led an ISO 27001 implementation through to certification - or built a SOC 2 Type II program from scratch and completed credible 27001 gap analysis work.
• You've owned a compliance or GRC program end to end at a company with real enterprise customers. You've sat across from an auditor and responded to customer security questionnaires yourself, not just maintained a control library.
• You're comfortable reading technical control evidence and having detailed conversations with engineers about how systems actually work. You can evaluate a piece of compliance automation and determine whether the control it claims to enforce is genuinely enforced. You can also read an AI system's data flows well enough to know what data reaches a model, where it goes, and who can retrieve it.
• You've directly managed security, GRC, or compliance professionals for two or more years, including hiring and performance management.
• You have a clear point of view on which security work should be automated and which shouldn't.
• You've managed a team across time zones and can speak concretely to how you used a narrow daily overlap window - what you protected it for, and how you made the rest of the work function asynchronously.

Why we think you'll love it here:

• Exposure to cutting-edge technologies to solve meaningful problems
• Collaborative, values-driven culture that balances rigor with innovation
• Unlimited paid time off
• Annual vacation bonus - yes, we’ll pay you a bonus to take paid time off!
• Individualized growth + development plans
• Strong values around work/life balance
• Community involvement opportunities
• Competitive benefits: medical, dental, vision, paid parental leave + 401K

$120,000 - $150,000 a year

At Field Nation, we share the value of transparency and enable this during our recruiting process. We believe it’s important to share the compensation range to best understand the full opportunity of a role!

We select our initial range based on reliable compensation survey data. Other factors we consider in setting the specific pay for an individual will generally include, among other things, experience, specialized skills, work location, and internal equity to provide competitive offers.

Additionally, every role is eligible for variable pay dependent on the position. As an agile and growing organization, the business needs may change. This may result in us hiring someone with less or more experience than the job description states. If that does happen, we will communicate the updated salary range and the new role to you as a candidate.

The range stated below is a starting point of the compensation conversation, we’d like to hear what your compensation expectations are too!

Base Salary Range | Minnesota or other Zone 3 | $120,000 - 150,000

Come as you are:

At Field Nation, we believe work is about more than checking the right boxes. If you don’t meet 100% of the requirements for this role, but still feel you’d be a good fit, we want to hear from you! We review all applications and may even have another open position where you are the perfect fit.

A Note on AI:

AI isn’t an add-on at Field Nation - it’s embedded in how we operate. We use AI-powered solutions to work smarter, move faster, and stay ahead - and we expect our team to do the same. If you’re someone who leans in, stays curious, and looks for a better way, you’ll fit right in.

While we utilize AI in our recruiting process to help surface candidates, every resume and application is reviewed by an actual human. You won’t get lost in an algorithm here.