# Compliance Operations

**Company:** [Poetic](https://hotfix.jobs/companies/poetic)
**Location:** San Francisco, CA, New York, NY
**Role:** Other
**Salary:** $180k – $225k/yr
**Experience:** 5+ years
**Skills:** SOC 2, HIPAA, pci dss, ISO 27001, audit coordination, security controls, vendor risk management, Automation, Cloud Infrastructure, identity systems, Cybersecurity
**Posted:** 2026-07-25

> Build and own the compliance program end-to-end for SOC 2, HIPAA, PCI DSS, ISO 27001 and other frameworks. Lead audits, build automations, partner with engineering on technical controls, manage vendor risk and customer security reviews as the first dedicated hire.

## Job Description

## Responsibilities
- Own Poetic’s compliance program across SOC 2, HIPAA, PCI DSS, ISO 27001, and future frameworks
- Keep the company continuously audit-ready by maintaining policies, controls, documentation, evidence, and remediation tracking
- Lead external audits end-to-end, coordinating auditors and internal stakeholders to ensure nothing falls through the cracks
- Build automations that eliminate manual compliance work and improve operational efficiency
- Partner with Engineering and IT to implement, validate, and document technical security controls
- Own customer security questionnaires, trust documentation, and security reviews so compliance never slows down enterprise sales
- Manage third-party vendor risk, assessments, and ongoing reviews

## Requirements
- Exceptional operational rigor and project management; you will not drop a single ball, and you are good at spotting edge cases and items that could fall through the cracks
- Ability to coordinate complex cross-functional work involving engineering, finance, legal, HR, external auditors, and enterprise customer teams
- Strong written communication and documentation skills
- Technically literate enough to understand or can teach yourself how to understand cloud infrastructure, identity systems, and basic security architecture
- Building ability - you should be comfortable using e.g. Claude to build a simple tool or automation to automate repetitive work
- High agency - you want to push the bounds further than even we’ve imagined to make Poetic and compliance here world-class
- Some relevant backgrounds include experience in IB/PE/consulting, bizops, and corporate finance

## Nice-to-Haves
- Experience owning or helping lead a compliance program for frameworks such as SOC 2, HIPAA, PCI DSS, ISO 27001, or another framework
- Experience at an early-stage startup
- Actively build automations with AI that reduce ongoing manual work
- Partnered closely with engineering teams
- Been involved in enterprise customer sales and procurement processes
- Cybersecurity knowledge or experience

## Similar roles

- [Fleet Manager](https://hotfix.jobs/jobs/8f042ba6-755c-48b8-b57a-0233cfaeebb4) - Fluidstack - Austin, TX - $181k – $246k/yr
- [System Verification and Validation Engineer](https://hotfix.jobs/jobs/95068d14-8a69-4fe6-a0b1-5c2604d6ce4a) - Zoox - Foster City, CA - $175k – $239k/yr
- [Quantitative Developer](https://hotfix.jobs/jobs/6d17727f-df4b-45fa-96a8-1720e08c4ccc) - Trexquant - New York, NY - $175k – $200k/yr
- [SAP Functional Consultant](https://hotfix.jobs/jobs/7a0d1f7c-c53c-4e98-82f0-bd2d5576ba4b) - Tessera Labs - San Jose, CA - $185k – $254k/yr
- [BOM Coordinator, Modular R&D](https://hotfix.jobs/jobs/b0b66d23-b770-4d73-9b6a-cbe70c48e46b) - Fluidstack - Austin, TX - $186k – $220k/yr

**Apply:** https://hotfix.jobs/jobs/b4bc2ec7-4366-462c-ac49-c81979fcf226
**Canonical:** https://hotfix.jobs/jobs/b4bc2ec7-4366-462c-ac49-c81979fcf226