SOC 2 Compliance Lead — Security & Privacy (SF)

Wwshemi; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Unlimited PTO

Parental leave

Housing stipend

Job summary

Wafer in San Francisco, CA is hiring aCompliance professional to own our security and privacy program on-site. You will coordinate SOC 2 Type II audits, manage evidence, and answer customer security questions while working closely with engineering, security, operations and legal.

You will maintain the trust center and related documentation, define controls, and drive improvements across access, logging, incident response and data retention.

Qualifications

• Experience owning SOC2 Type II audits and ongoing compliance work.
• Strong understanding of cloud infrastructure, IAM, data handling and security controls.
• Experience coordinating with engineering and legal teams on audits.

Responsibilities

• Own the SOC 2 audit process, including evidence collection and remediation tracking.
• Lead customer security questionnaires and provide evidence-backed responses.
• Maintain trust center, policies and approved responses.
• Collaborate with security and engineering to define and track controls.
• Coordinate privacy and contractual requirements with legal and engineering.
• Manage vendor security assessments and action owners.
• Build efficient processes to accelerate delivery while meeting commitments.

Skills

SOC2 audits ownership

Cloud security controls

Security program governance

Written communication

Job description

Wafer in San Francisco, CA is hiring aCompliance professional to own our security and privacy program on-site. You will coordinate SOC 2 Type II audits, manage evidence, and answer customer security questions while working closely with engineering, security, operations and legal.

You will maintain the trust center and related documentation, define controls, and drive improvements across access, logging, incident response and data retention.