SF-Based Security & Compliance Lead (SOC 2)

Jack & Jill; San Francisco (CA); On-site; USD 120,000 - 200,000; Full time

Job summary

Opal Security is seeking a Security & Compliance Lead to own the internal security program, including SOC 2 compliance, vendor risk, and incident response. Work with engineering and leadership to maintain a robust security posture in a fast-paced startup.

You will partner with cross-functional teams to ensure security while preserving engineering velocity, driving proactive security initiatives, and building a security-first culture across the organization.

Qualifications

• 5+ years of experience in security operations, GRC, or IT security.
• Strong familiarity with SOC 2 frameworks and identity concepts (least-privilege, access reviews, JML).
• Experience coordinating with auditors, MSPs, and external partners to drive security programs.

Responsibilities

• Direct internal security operations including endpoint protection, SSO/MFA, and incident response.
• Lead the SOC 2 compliance lifecycle from control ownership to audit readiness; implement scalable processes.
• Oversee third-party risk management and vulnerability disclosure with cross-functional teams to maintain secure vendor ecosystems.

Skills

Security operations

GRC

IT security

SOC 2

Vendor management

Communication

Job description

Opal Security is seeking a Security & Compliance Lead to own the internal security program, including SOC 2 compliance, vendor risk, and incident response. Work with engineering and leadership to maintain a robust security posture in a fast-paced startup.

You will partner with cross-functional teams to ensure security while preserving engineering velocity, driving proactive security initiatives, and building a security-first culture across the organization.