Reviews client evidence for compliance frameworks like SOC2, ISO27001, PCI, HIPAA, and GDPR. Conducts QA checks, identifies gaps, and ensures audit readiness through detailed documentation reviews and collaboration with security teams.
Salary not listed
RemoteOther
About the role
Key Responsibilities
Perform thorough internal reviews of client-uploaded evidence for compliance frameworks including SOC2, ISO27001, PCI, HIPAA, and GDPR
Conduct detailed quality assurance checks on individual controls to verify completeness, accuracy, and sufficiency prior to their audits with third-party auditing firms
Execute comprehensive final QA reviews prior to clients engaging with an external auditor
Identify gaps or weaknesses in evidence documentation and recommend improvements
Develop and maintain internal QA standards and review methodologies
Create guidance documents to help clients improve evidence quality
Collaborate with Security Program Engineers to address compliance gaps
Stay current on evolving compliance requirements across multiple frameworks to ensure our pre-audit preparation meets industry standards
Track audit readiness metrics and identify opportunities for process improvement
Provide expert feedback to our product team for compliance platform enhancements to better support pre-audit readiness
Requirements
Deep understanding of SOC2, ISO27001, PCI, HIPAA, and GDPR requirements
Strong technical knowledge of security controls and their implementation
Experience reviewing and evaluating evidence for compliance audits, particularly in preparing organizations for external audit processes
Excellent attention to detail and quality control mindset
Strong written communication skills for documenting findings
Ability to work independently while supporting multiple client engagements
Familiarity with compliance automation platforms and tools
Experience in pre-audit preparation and internal quality assurance, preferably with multiple frameworks
Certification in relevant frameworks (e.g., CISA, ISO 27001 Lead Auditor) preferred
Skills
Soc2Iso27001PCIHIPAAGDPRCisaIso 27001 Lead AuditorSecurity ControlsCompliance AutomationAudit Readiness Metrics
Safeguards Enforcement Analyst responsible for designing automated enforcement systems, developing evals, reviewing flagged content for violence and extremism risks, and partnering with engineering to mitigate AI misuse that could cause real-world harm. Requires experience in threat intelligence, policy enforcement, or counterterrorism plus SQL proficiency.
285k – 330k/yr
Hybrid5+ YOEOther
Indirect Tax Filings Specialist
SphereSan Francisco, CA
Own day-to-day indirect tax filing, preparation, review, and submission across jurisdictions. Drive process automation with Engineering, reconciliations, risk monitoring, and scaling compliance operations in a fast-paced AI-powered tax tech environment.
Salary not listed
Remote4+ YOEOther
SEO Manager
GivebutterNew York, NY +9
SEO Manager partnering with Content Marketing to drive organic growth through keyword research, content optimization, technical collaboration, and experimentation with emerging search channels including AI discovery. Requires 5+ years SEO experience with strong analytical and cross-functional skills.
95k – 110k/yr
Remote5+ YOEOther
Manager, Credit Risk Strategy
OctaneNew York, NY
Manager overseeing credit risk strategies for captive partner portfolio. Analyze origination/performance data to optimize underwriting, pricing, and profitability while managing risk appetite. Requires 4+ years credit analysis experience, strong Python/SQL skills, and ability to communicate insights to C-level and external partners.
110k – 150k/yr
Hybrid4+ YOEOther
Payroll Analyst, Global Payroll
ChainguardUnited States
Payroll Analyst responsible for building pre-payroll analytics, running end-to-end US payroll cycles, conducting audits, managing Workday inputs/EIBs, and supporting global payroll vendors and compliance as the company scales internationally. Requires 4+ years payroll experience and 3+ years with Workday Payroll.