Senior Security Compliance Leader - Remote & Equity

Sardine; United States; On-site; USD 160,000 - 210,000; Full time

Benefits offered by this job

Remote‑first culture

MacBook Pro provided

Home office stipend

Health insurance (US) and wellness

Job summary

Sardine is seeking a Security Compliance Lead to own end-to-end compliance and GRC activities. You will partner with engineering, IT, product, security, and legal to run audits, control implementations, and regulator interactions.

This is a senior, hands-on role with room to grow the team as Sardine scales. We value remote-first work culture and expect leadership, strong communication, and deep knowledge of PCI DSS, SOC 2, ISO 27001, GDPR/CCPA, and DORA.

Qualifications

• 7+ years in security compliance, GRC, or audit with end-to-end ownership.
• Deep knowledge of PCI DSS, SOC 2, ISO 27001, GDPR/CCPA, and DORA.
• Technical and product fluency with security-minded product.
• Excellent written and verbal communication with auditors and leadership.
• Fast-paced fintech or payments experience preferred.
• People leadership experience or clear readiness to lead.
• Bonus: PCI DSS Level 1 service provider experience.
• Operational resilience and familiarity with control frameworks.
• Familiar with security tooling and macOS environments.

Responsibilities

• Own the security compliance program and framework across multiple standards.
• Lead audits, coordinate with regulators, and drive risk remediation.
• Partner with engineering, product, IT, and legal to run reviews.
• Present objectives and results to senior management and board.
• Develop and mature the compliance program and team over time.
• Manage evidence, scans, and artifacts for audits and customer reviews.
• Build fluency in Sardine’s platform to ground controls in reality.
• Identify automation opportunities to streamline compliance work.

Skills

Security compliance

GRC

Audit management

Communication

Leadership

Fintech experience

Travel availability

Product fluency

Problem solving

Tools

Vanta

Rippling

macOS

Job description

Sardine is seeking a Security Compliance Lead to own end-to-end compliance and GRC activities. You will partner with engineering, IT, product, security, and legal to run audits, control implementations, and regulator interactions.

This is a senior, hands-on role with room to grow the team as Sardine scales. We value remote-first work culture and expect leadership, strong communication, and deep knowledge of PCI DSS, SOC 2, ISO 27001, GDPR/CCPA, and DORA.