Trust & Compliance Operations Manager
Owns the end-to-end vendor diligence function, including VDDQ/RFP/RFI responses, trust-center content, data-room governance, and cross-functional coordination. Requires 4+ years of relevant experience, strong security and compliance knowledge, and the ability to communicate technical and legal details clearly.
About the job
Responsibilities
- Own all vendor due diligence questionnaires (VDDQs), requests for proposals (RFPs), and requests for information (RFIs) across new business, renewals, and expansions.
- Manage intake, drafting, internal review, submission, SLA tracking, and escalation of at-risk deals.
- Build and maintain a knowledge base of pre-approved, audit-ready responses to security, privacy, and compliance questions.
- Keep diligence materials current through SOC 2 cycles, policy updates, and material product or infrastructure changes.
- Partner with Engineering to scope and launch a self-service trust center.
- Own the diligence data room, including taxonomy, document versioning, access controls, and customer-facing versus internal content.
- Coordinate Security, Legal, Product, Sales, and Customer Success stakeholders to source accurate information.
- Maintain relationships with subject-matter owners and prospects' and customers' security, compliance, and vendor-management teams, including participation in live diligence calls.
- Define and publish diligence turnaround SLAs and report quarterly on deals unblocked or accelerated, quantified in ARR.
Requirements
- 4+ years of experience owning VDDQs, RFPs, and RFIs end to end, ideally in a regulated B2B SaaS environment.
- Working knowledge of security, privacy, and compliance frameworks relevant to financial-services vendors, including SOC 2, ISO 27001, NIST CSF, GLBA/Reg S-P, and SEC/FINRA vendor oversight expectations.
- Ability to translate technical and legal details into clear, customer-ready language under deadline pressure.
- Experience building repeatable diligence processes and structures, including data-room taxonomies, knowledge bases, and SLAs.
- Ability to work cross-functionally with Security, Legal, Engineering, and Product without requiring deep technical expertise in every domain.
- Experience working directly with prospects' and customers' security, compliance, and vendor-management teams.
- Experience in financial services, wealthtech, or another regulated industry preferred.
- Bachelor's degree or equivalent practical experience.
Compensation
- Base salary: $150,000-$175,000 USD annually.
- Equity included.
Skills
Vddqs, Rfps, Rfis, SOC 2, ISO 27001, Nist Csf, Glba, Sec/Finra, Data Rooms, Knowledge Bases, Sla Management, Security Compliance
Similar jobs
Business Operations jobs
Outset
San Francisco, CAOwn and scale Outset’s participant recruitment operation across partners, internal processes, and product experiences. The role requires 5–10 years of recruitment or research operations experience, strong vendor management, and the ability to build cross-functional systems and enablement.
Vercel
San Francisco, CA
Own strategic sourcing and complex commercial negotiations for Vercel’s cloud, AI infrastructure, and hyperscaler providers. The role requires significant cloud sourcing experience, strong pricing and TCO analysis, and the ability to manage high-value contracts amid rapidly changing consumption.
Roboflow
San Francisco, CA
Own the end-to-end delivery of datasets and environments for frontier AI labs, translating ambiguous partner requirements into scoped, staffed, quality-controlled shipments. The role requires strong operational judgment, organization, communication, and experience with agents, evaluations, or reinforcement learning workflows.
Imprint
Remote
Own day-to-day fraud operations across internal specialists, team leads, and an outsourced BPO workforce in a regulated consumer credit environment. The role focuses on people management, SOP and compliance processes, vendor QA, escalation management, and scalable operational improvements.
AirOps
San Francisco, CA
Build operational cadences, AI-native workflows, and analytical models to scale hyper-growth SaaS from $10M+ ARR. Requires 4-6 years in strategy/ops, high analytical skills, and comfort in ambiguity across functions.