Senior Compliance Engineer: Automation & ISO 27001 (Remote)

Bazeta; United States; Remote; USD 180,000 - 260,000; Full time

Job summary

Socket is seeking a Compliance Engineering Lead to own compliance as an engineered system. You will build and run SOC 2 Type II programs, define ISO 27001 scope, and automate evidence collection across GCP, GitHub, identity providers, MDM, and ticketing.

Reporting to the CISO, you will lead the first customer trust specialist, shape the ISMS, implement continuous controls, and drive risk management with external partners while aligning with enterprise buyers.

Qualifications

• Minimum two full SOC 2 Type II cycles ownership with auditor relationship.
• ISO 27001 depth with certification or ISMS surveillance experience.
• Automation of security controls and evidence collection across cloud and dev tools.
• Experience building and running risk programs with vendors and internal teams.
• Strong writing and communication for auditors, engineers, and executives.

Responsibilities

• Own SOC 2 Type II end to end, including scope and evidence pipeline.
• Drive ISO 27001 certification and maintain ISMS over time.
• Automate evidence extraction from GCP, GitHub, and identity sources.
• Manage vendor risk programs with third parties and renewal cadence.
• Develop and maintain customer-facing assurance artifacts and trust portal.
• Collaborate across Security, Engineering, Legal, and GTM teams.

Skills

SOC 2 Type II ownership

ISO 27001 expertise

Automation

Risk management

Auditors communication

Tools

Drata

Vanta

GCP

GitHub

Identity provider

MDM

Ticketing systems

Job description

Socket is seeking a Compliance Engineering Lead to own compliance as an engineered system. You will build and run SOC 2 Type II programs, define ISO 27001 scope, and automate evidence collection across GCP, GitHub, identity providers, MDM, and ticketing.

Reporting to the CISO, you will lead the first customer trust specialist, shape the ISMS, implement continuous controls, and drive risk management with external partners while aligning with enterprise buyers.