Senior InfoSec & Compliance Lead (Remote)

Iron Sheepdog; Indiana (PA); On-site; USD 140,000 - 180,000; Full time

Job summary

Iron Sheepdog is seeking a Lead Information Security & Compliance Specialist to spearhead governance and hands-on security across our fintech workflows. You will drive SOC 2 programs, policy governance, and act as the primary security liaison for enterprise clients.

The role blends security engineering with governance, touching cloud, web, mobile, and AI security. Remote-first with periodic on-site audits in collaboration with partners.

Qualifications

• 5+ years of SOC 2 program leadership or equivalent audit experience.
• Proven SaaS security expertise across web, cloud, and APIs.
• Experience as primary security contact for enterprises.

Responsibilities

• Lead and manage SOC 2 compliance programs end-to-end.
• Create and govern IT and information security policies.
• Serve as client security liaison for enterprise customers.
• Manage vendor security relations and MSP engagement.
• Hands-on security engineering for React/Node.js codebases.
• Oversee DevSecOps with Snyk and CI/CD pipelines.
• Perform internal pen tests and DR planning.
• Run AI security testing for LLM features.
• Build company-wide security awareness training.

Skills

SOC 2

SaaS security

Enterprise security

API security

DevSecOps tooling

AI security testing

Security training

Cloud/web/mobile

Tools

Snyk

Firebase

Firestore

Job description

Iron Sheepdog is seeking a Lead Information Security & Compliance Specialist to spearhead governance and hands-on security across our fintech workflows. You will drive SOC 2 programs, policy governance, and act as the primary security liaison for enterprise clients.

The role blends security engineering with governance, touching cloud, web, mobile, and AI security. Remote-first with periodic on-site audits in collaboration with partners.