SOC 2 Security & IT Compliance Lead

Helloslang; New York (NY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Helloslang seeks a Compliance & IT Security Manager to own and advance our compliance programs, security posture, and core IT functions. This senior IC role ensures SOC 2 readiness, policy maintenance, risk tracking, and secure daily operations as the company grows.

The ideal candidate blends hands-on security with practical IT experience, balancing audit coordination with SSO configuration and vendor risk management in a fast-paced startup environment.

Qualifications

• 7+ years in IT administration, security, and compliance or similar field.
• Bachelor's or Master's degree in Cybersecurity/IT or related field.
• Nationally recognized cybersecurity certifications (e.g., CISSP, Security+).
• Direct SOC 2 audit experience including evidence collection and auditor coordination.
• Hands-on Google Workspace/M365 administration and policy enforcement.
• Experience with IAM, SSO configuration, and multi-SaaS provisioning/deprovisioning.
• Familiarity with Drata, Vanta or similar compliance automation platforms.
• Secure software development and incident response basics.
• Strong written communication for policy and audit documentation.
• Ability to manage multiple workstreams independently.

Responsibilities

• Own and maintain security and compliance programs including SOC 2 audit readiness.
• Maintain and update security policies reflecting evolving needs and regs.
• Maintain risk registry with identified risks, mitigations, and timelines.
• Plan and execute compliance activities: backup tests, access reviews, BCD, drills.
• Coordinate annual penetration tests and remediation of findings.
• Manage vendor registry and security reviews including SOC 2 reports and DPA reviews.
• Monitor security events, triage issues, and coordinate incident response.
• Improve compliance automation workflows in Drata/Vanta to reduce manual evidence.
• Develop and deliver security awareness training for staff.

Skills

Cybersecurity

IT Compliance

SOC 2 Audits

Risk Management

Security Policy

IAM / SSO

Cloud Security

Security Awareness

Incident Response

Vendor Risk

Education

Bachelor's or Master's in Cybersecurity/IT

CISSP / Security+ / PenTest+ / CASM (certifications)

Tools

Google Workspace

Rippling

Okta

OneLogin

JumpCloud

Jamf

Intune

Drata

Vanta

Cloud Platforms (GCP/AWS/AZ)

Job description

Helloslang seeks a Compliance & IT Security Manager to own and advance our compliance programs, security posture, and core IT functions. This senior IC role ensures SOC 2 readiness, policy maintenance, risk tracking, and secure daily operations as the company grows.

The ideal candidate blends hands-on security with practical IT experience, balancing audit coordination with SSO configuration and vendor risk management in a fast-paced startup environment.