SOC 2 Compliance Manager: Security & Privacy Lead

Wafer; San Francisco (CA); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

401(k) retirement plan

Full medical, dental, and vision

Daily lunch and dinner, unlimited PTO,

Parental leave

Housing stipend (post-tax) within 0.5?

Uber/Waymo from/to office

Relocation allowance and benefits

Visa sponsorship available

Job summary

Wafer is seeking a dedicated compliance leader to own our program. You’ll work with engineering, security, operations and legal to run audits, answer customer security questions and turn requirements into practical, reliable processes.

You’ll own SOC 2 Type II audits, coordinate evidence, and drive remediation across access, logging and incident response. You’ll help keep our trust center, policies and responses accurate, and partner with security and engineering to track improvements.

Qualifications

• Experience owning SOC 2 Type II audits and ongoing compliance work.
• Strong understanding of cloud infrastructure, identity and access controls.
• Experience coordinating with engineering, security and legal teams.

Responsibilities

• Own the SOC 2 audit process, including evidence collection, auditor coordination, control reviews and remediation tracking.
• Lead customer security questionnaires and reviews with evidence-backed responses.
• Maintain trust center, policies and compliance documentation accuracy.
• Define controls with security/engineering, collect evidence and track improvements (access, devices, logging, incident response, business continuity).
• Coordinate privacy and contractual requirements with legal/engineering (data retention, deletion, subprocessors).
• Manage vendor security assessments, track risks, owners and outstanding actions.
• Build efficient processes enabling rapid delivery while meeting commitments.

Skills

SOC 2 experience

Audit leadership

Cloud security

Documentation/writing

Ownership mindset

Job description

Wafer is seeking a dedicated compliance leader to own our program. You’ll work with engineering, security, operations and legal to run audits, answer customer security questions and turn requirements into practical, reliable processes.

You’ll own SOC 2 Type II audits, coordinate evidence, and drive remediation across access, logging and incident response. You’ll help keep our trust center, policies and responses accurate, and partner with security and engineering to track improvements.