Senior Compliance & Risk Lead - HIPAA, SOC 2, Audit Ready

Socket.dev; Oklahoma; On-site; USD 90,000 - 130,000; Full time

Job summary

Socket.dev is seeking a RMS Compliance Manager to ensure adherence to HIPAA, SOC 2, and ISO 27001 across the organization. You will oversee policies, controls, and audit readiness to sustain a culture of compliance.

You will conduct risk assessments, manage vendor risk, lead incident response, and collaborate with IT, legal, and operations to implement robust data protection and regulatory reporting. The role requires 3–5+ years in compliance and professional certifications preferred.

Qualifications

• Bachelor's degree and 3-5+ years of experience in compliance/risk management/audit/data security.
• Experience developing or maintaining policies, risk assessments, and remediation efforts.
• Familiarity with HIPAA, SOC 2, ISO 27001 or similar standards and regulatory reporting requirements.

Responsibilities

• Conduct compliance and risk assessments, including internal control testing.
• Prepare for and respond to external audits, regulatory inquiries, and legal requests.
• Manage third-party vendor risk assessments and ongoing monitoring.
• Oversee incident and breach response, including investigation, notification, and remediation.
• Maintain and enhance SOC 2 controls, documentation, and evidence management.
• Track and validate remediation efforts to ensure control effectiveness.
• Develop and enforce policies related to PHI, data classification, encryption, access controls, and data retention.
• Coordinate regulatory and privacy aspects of incident and breach response, Ensure notification obligations are met.

Skills

Analytical skills

Problem-solving

Documentation skills

Communication skills

MS Office

Compliance tools

Education

Bachelor's degree in Business/Legal Studies/Compliance/Information Security/Risk Management

Tools

MS Office

Job description

Socket.dev is seeking a RMS Compliance Manager to ensure adherence to HIPAA, SOC 2, and ISO 27001 across the organization. You will oversee policies, controls, and audit readiness to sustain a culture of compliance.

You will conduct risk assessments, manage vendor risk, lead incident response, and collaborate with IT, legal, and operations to implement robust data protection and regulatory reporting. The role requires 3–5+ years in compliance and professional certifications preferred.