SOC 2 Compliance Manager

Merci Technologies, Inc.; Atlanta (GA); Remote; USD 130,000 - 160,000; Full time

Job summary

Merci Technologies, Inc. is seeking a SOC 2 Compliance Manager to lead governance, risk management, and audit readiness initiatives across the organization.

The role focuses on SOC 2 Type I and II, security policies, and collaboration with auditors and cross-functional teams. Remote options in the U.S. with hybrid flexibility are available for a seasoned cybersecurity and compliance professional.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Business, Risk Management, or related field.
• 5+ years of experience in compliance, information security, GRC, or audit functions.
• Hands-on experience managing SOC 2 audits and compliance programs.
• Strong understanding of SOC 2 Trust Services Criteria.
• Experience with risk assessments, control testing, and remediation management.
• Knowledge of security frameworks including NIST, ISO 27001, and CIS Controls.
• Experience working with external auditors and compliance assessors.
• Strong project management and stakeholder management skills.
• Excellent written and verbal communication abilities.

Responsibilities

• Lead and manage SOC 2 Type I and Type II compliance initiatives.
• Serve as the primary liaison between auditors, internal stakeholders, and external partners.
• Develop, implement, and maintain security policies, standards, and procedures.
• Monitor compliance with SOC 2 Trust Services Criteria.
• Conduct risk assessments and control effectiveness reviews.
• Coordinate evidence collection and audit preparation activities.
• Track remediation efforts and ensure timely closure of audit findings.
• Partner with IT, Security, Legal, HR, and Operations teams to maintain compliance.
• Develop compliance metrics, dashboards, and executive reporting.
• Maintain compliance documentation and governance frameworks.
• Support customer security questionnaires and due diligence requests.
• Assist with other compliance programs including ISO 27001, NIST, HIPAA, GDPR, and PCI-DSS, as applicable.

Skills

Project management

Stakeholder management

Communication

Auditing experience

SOC 2 expertise

Education

Bachelor's degree in Cybersecurity or related field

Tools

Vanta

Drata

Secureframe

AuditBoard

Archer

ServiceNow GRC

Job description

Location: Remote (U.S.) / Hybrid
Employment Type: Full-Time
Experience: 5+ Years
Industry: Cybersecurity / Governance, Risk & Compliance (GRC)

About the Opportunity

Merci Technologies is partnering with a client seeking an experienced SOC 2 Compliance Manager to lead the organization's compliance, governance, risk management, and audit readiness initiatives.

This role is ideal for a cybersecurity and compliance professional with expertise in SOC 2, security governance, risk assessments, internal controls, audit coordination, and information security compliance programs.

Key Responsibilities

• Lead and manage SOC 2 Type I and Type II compliance initiatives.
• Serve as the primary liaison between auditors, internal stakeholders, and external partners.
• Develop, implement, and maintain security policies, standards, and procedures.
• Monitor compliance with SOC 2 Trust Services Criteria.
• Conduct risk assessments and control effectiveness reviews.
• Coordinate evidence collection and audit preparation activities.
• Track remediation efforts and ensure timely closure of audit findings.
• Partner with IT, Security, Legal, HR, and Operations teams to maintain compliance.
• Develop compliance metrics, dashboards, and executive reporting.
• Maintain compliance documentation and governance frameworks.
• Support customer security questionnaires and due diligence requests.
• Assist with other compliance programs including ISO 27001, NIST, HIPAA, GDPR, and PCI-DSS, as applicable.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Business, Risk Management, or related field.
• 5+ years of experience in compliance, information security, GRC, or audit functions.
• Hands-on experience managing SOC 2 audits and compliance programs.
• Strong understanding of SOC 2 Trust Services Criteria.
• Experience with risk assessments, control testing, and remediation management.
• Knowledge of security frameworks including NIST, ISO 27001, and CIS Controls.
• Experience working with external auditors and compliance assessors.
• Strong project management and stakeholder management skills.
• Excellent written and verbal communication abilities.

Preferred Qualifications

• Certifications such as CISSP, CISA, CRISC, CISM, ISO 27001 Lead Implementer, or Security+.
• Experience with compliance platforms such as Vanta, Drata, Secureframe, AuditBoard, Archer, or ServiceNow GRC.
• Experience supporting cloud environments including Microsoft Azure, AWS, or Google Cloud.
• Knowledge of third-party risk management and vendor compliance programs.
• Experience supporting multiple regulatory and compliance frameworks.

Why Join This Opportunity?

• Lead enterprise-wide compliance and governance initiatives.
• Influence security strategy and regulatory readiness.
• Work directly with executive leadership and audit partners.
• Support a security-first culture within a growing organization.
• Opportunity to build and mature compliance programs from the ground up.

About Merci Technologies

Merci Technologies partners with organizations across multiple industries to identify and deliver exceptional talent in Cybersecurity, Cloud, Artificial Intelligence, Data & Analytics, Digital Transformation, Compliance, and Enterprise Technology.