SOC 2 & ISO 27001 Compliance Lead

Ethos; United States; Remote; USD 124,000 - 199,000; Part time

Benefits offered by this job

Remote work

London office option

Job summary

Ethos is seeking an experienced compliance lead to own SOC 2 and ISO 27001 from planning to certification. You will define the plan, drive delivery and ensure the right people deliver, with engineering handling technical changes and leadership/operations owning their parts.

Your focus includes drafting policies, performing risk assessments, getting audit ready, and guiding audits to a successful certification.

Qualifications

• Experience leading SOC 2 and ISO 27001 programmes from planning to certification.
• Ability to draft and implement security/compliance policies and controls.
• Strong collaboration with engineering, leadership and operations to drive audits.

Responsibilities

• Own SOC 2 and ISO 27001 from start to finish: set the plan and keep it moving.
• Coordinate with leadership, engineering and operations on what’s needed and why.
• Draft policies and run risk assessments as needed.
• Prepare and guide the company through audits to achieve certification.

Skills

SOC 2

ISO 27001

Risk assessment

Policy drafting

Audit readiness

Project planning

Stakeholder management

Tools

Vanta

Job description

Ethos is growing fast, and our clients, including leading AI labs and investment firms, increasingly expect independent proof that we protect their data. We need an experienced compliance lead to own our SOC 2 and ISO 27001 programme and take us from early setup to certification as quickly as is realistic. Vanta is already in place.

You won't be doing it alone. Engineering will make the technical changes, and leadership and operations will own their parts. Your job is to set the plan, drive it forward and make sure the right people deliver. Great looks like a clear plan within your first two weeks, a team that always knows what's next and why, and a smooth audit.

What you'll do:

• Own SOC 2 and ISO 27001 from start to finish: set the plan, keep it moving and hold us to it
• Work with leadership, engineering and operations, setting out what's needed and why
• Take on specialist work yourself where it makes sense, such as drafting policies or running the risk assessment
• Get us audit ready and guide us through the audits

Compensation: £500–800 per day

Commitment: 2–3 days per week. Fixed-term until certification, with the possibility of extending

Location: Remote. Being able to work from our London office is a strong plus

Start date: ASAP