SOC 2 Compliance Lead — Remote Audit & Governance

Merci Technologies, Inc.; Atlanta (GA); Remote; USD 130,000 - 160,000; Full time

Job summary

Merci Technologies, Inc. is seeking a SOC 2 Compliance Manager to lead governance, risk management, and audit readiness initiatives across the organization.

The role focuses on SOC 2 Type I and II, security policies, and collaboration with auditors and cross-functional teams. Remote options in the U.S. with hybrid flexibility are available for a seasoned cybersecurity and compliance professional.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Business, Risk Management, or related field.
• 5+ years of experience in compliance, information security, GRC, or audit functions.
• Hands-on experience managing SOC 2 audits and compliance programs.
• Strong understanding of SOC 2 Trust Services Criteria.
• Experience with risk assessments, control testing, and remediation management.
• Knowledge of security frameworks including NIST, ISO 27001, and CIS Controls.
• Experience working with external auditors and compliance assessors.
• Strong project management and stakeholder management skills.
• Excellent written and verbal communication abilities.

Responsibilities

• Lead and manage SOC 2 Type I and Type II compliance initiatives.
• Serve as the primary liaison between auditors, internal stakeholders, and external partners.
• Develop, implement, and maintain security policies, standards, and procedures.
• Monitor compliance with SOC 2 Trust Services Criteria.
• Conduct risk assessments and control effectiveness reviews.
• Coordinate evidence collection and audit preparation activities.
• Track remediation efforts and ensure timely closure of audit findings.
• Partner with IT, Security, Legal, HR, and Operations teams to maintain compliance.
• Develop compliance metrics, dashboards, and executive reporting.
• Maintain compliance documentation and governance frameworks.
• Support customer security questionnaires and due diligence requests.
• Assist with other compliance programs including ISO 27001, NIST, HIPAA, GDPR, and PCI-DSS, as applicable.

Skills

Project management

Stakeholder management

Communication

Auditing experience

SOC 2 expertise

Education

Bachelor's degree in Cybersecurity or related field

Tools

Vanta

Drata

Secureframe

AuditBoard

Archer

ServiceNow GRC

Job description

Merci Technologies, Inc. is seeking a SOC 2 Compliance Manager to lead governance, risk management, and audit readiness initiatives across the organization.

The role focuses on SOC 2 Type I and II, security policies, and collaboration with auditors and cross-functional teams. Remote options in the U.S. with hybrid flexibility are available for a seasoned cybersecurity and compliance professional.