# Compliance Engineering Lead

**Company:** [Socket](https://hotfix.jobs/companies/socket)
**Location:** Remote
**Role:** Security Engineering
**Skills:** Soc 2 Type Ii, ISO 27001, Isms, GCP, GitHub, Compliance Automation, Risk Management, Vendor Risk Management, Drata, Vanta, Iso/Iec 42001, Eu Ai Act, Nist Ai Rmf, Trust Portals
**Posted:** 2026-08-26

> Own Socket’s compliance program as an engineered system, leading SOC 2 Type II, ISO 27001, risk and vendor programs, automated evidence pipelines, and customer assurance. The role requires deep audit ownership, ISO 27001 experience, automation skills, and the ability to build and lead a compliance function.

## Job Description

## Responsibilities
- Own SOC 2 Type II end to end, including the observation window, auditor relationship, audit scoping, controls, findings, and evidence pipeline.
- Lead Socket through ISO 27001 certification by defining the scope and ISMS, conducting gap assessments and internal audits, preparing the organization, and maintaining the ISMS through surveillance audits.
- Build and maintain automated evidence collection from systems of record, including GCP, GitHub, identity providers, MDM, and ticketing systems.
- Create scheduled control monitoring that detects drift and alerts promptly.
- Own compliance platform strategy and evaluate whether to buy, build, or expand existing tooling.
- Run risk management and vendor-risk programs, including the risk register, vendor tiering, reviews, and renewal cadence.
- Own customer-facing assurance materials, including the trust portal and enterprise security artifact library.
- Evaluate AI assurance frameworks and regulations, including ISO/IEC 42001, AIUC-1, the EU AI Act, and the NIST AI Risk Management Framework.
- Report to the CISO and hire and lead the first customer trust teammate focused on security questionnaires, RFPs, and contract security reviews with Legal.

## Requirements
- Personally owned at least two complete SOC 2 Type II cycles as the accountable owner, including auditor management, scoping, evidence, and findings.
- Experience taking an organization through ISO 27001 certification or managing an ISMS through surveillance audits.
- Ability to build and maintain automation against services and APIs; experience with GCP, GitHub, identity providers, MDM, and ticketing systems.
- Hands-on experience with Drata, Vanta, or a similar compliance platform, with clear opinions on their strengths and limitations.
- Strong judgment in prioritizing real control and risk gaps versus administrative or formatting issues.
- Excellent written communication for auditors, enterprise security reviewers, engineers, and executives.
- Experience working in a remote, fast-moving environment with shifting priorities and limited predefined structure.

## Nice to Have
- Exposure to AI governance frameworks, including ISO/IEC 42001, the NIST AI Risk Management Framework, and the EU AI Act.
- Experience at a security vendor or another company subject to rigorous customer security scrutiny.
- Experience with contract security review alongside Legal.
- Experience building compliance automation in-house.

## Benefits
- Market-competitive salary bands.
- Meaningful equity program.
- Comprehensive health benefits with 99% coverage for employees and families.
- Flexible time off, holidays, and winter shutdown.
- Paid parental leave.
- Remote-first work with quarterly team off-sites.

## Similar jobs

- [SOC Lead](https://hotfix.jobs/jobs/1b4ce51d-67b7-4000-a328-a6f0e74f22a6) - Idme - McLean, VA - $96k – $112k/yr
- [Senior Security Engineer](https://hotfix.jobs/jobs/9286e91d-ca35-4449-bb47-da0dc51b2aaa) - ConductorOne - Remote - $100k – $200k/yr
- [Security GRC Lead](https://hotfix.jobs/jobs/2eb261b0-5ff9-435d-b0fb-eaf5933051d1) - Mercor - San Francisco, CA - $350k – $425k/yr
- [Lead, Security Controls Assurance - SOX](https://hotfix.jobs/jobs/a1c11627-c920-4e31-abc6-2e170042a626) - Anthropic - San Francisco, CA - $410k – $510k/yr
- [Senior Platform Security Engineer](https://hotfix.jobs/jobs/3ac667bf-62fa-4280-8ccb-2af3468d8579) - Discord - $196k – $245k/yr

**Apply:** https://hotfix.jobs/jobs/7c0eb02e-e090-415c-84c5-c9c8ea0b42c9
**Canonical:** https://hotfix.jobs/jobs/7c0eb02e-e090-415c-84c5-c9c8ea0b42c9