Senior Security Compliance Consultant (SOC 2 & GRC Specialist)
Summary
We are seeking an elite, hands-on Senior Security Compliance Consultant (SOC 2 & GRC Specialist) to lead a critical, company-wide SOC 2 Type II audit readiness initiative. In this strategic engagement, you will perform comprehensive gap analyses, assess existing security controls, design robust compliance workflows, and drive cross-functional teams toward audit completion.
The ideal candidate brings a proven track record in GRC frameworks, control mapping, evidence automation, and policy development. Utilizing automated compliance platforms such as Sprinto, you will build repeatable compliance processes, validate technical controls, and ensure a seamless audit experience across the entire organization.
General Information (About the Client)
Our client is a fast-scaling, cloud-native technology platform committed to maintaining enterprise-grade trust, security, and data privacy. To support their rapid commercial growth and enterprise sales pipeline, they are establishing a formal, highly disciplined security governance model.
They operate a modern, cloud-first environment where compliance is treated not as a passive checklist, but as an active, automated operational advantage. By leveraging modern GRC platforms and fostering a security-conscious culture, they provide an empowering environment for compliance experts to drive real architectural and procedural improvements.
Tasks and Deliverables
SOC 2 Readiness & Gap Analysis: Conduct a thorough assessment of existing technical and operational security controls, pinpointing compliance gaps and building an actionable remediation roadmap.
Control Design & Implementation: Author, refine, and operationalize security controls, policies, and procedures aligned with SOC 2 Trust Services Criteria (TSC) and PCI DSS standards.
Automated Evidence Collection: Lead evidence-gathering workflows using automated GRC tooling (Sprinto), ensuring all technical artifacts, access logs, and policy attestations are validated and audit-ready.
PCI DSS Guidance: Provide expert advisory on maintaining PCI DSS alignment alongside SOC 2, ensuring overlapping control requirements are mapped efficiently to reduce operational drag.
Cross-Functional Coordination: Collaborate with engineering, DevOps, HR, and IT teams to embed compliance workflows into daily operations without slowing down feature execution.
Auditor Interface & Readiness: Serve as the primary liaison during the audit preparation phase, coordinating directly with external auditors to present evidence, resolve findings, and ensure a successful audit cycle.
Required Experience
SOC 2 Mastery: Proven track record of leading end-to-end SOC 2 readiness, gap remediation, and audit preparation initiatives for cloud-native or B2B SaaS companies.
GRC & PCI DSS Acumen: Deep familiarity with Governance, Risk, and Compliance (GRC) frameworks, risk assessment methodologies, and PCI DSS compliance requirements.
Tooling Proficiency (Sprinto): Direct, practical experience leveraging automated compliance and evidence-collection platforms, specifically Sprinto (or equivalent modern platforms like Vanta/Drata).
Policy & Control Mapping: Exceptional capability to author clear, enforceable security policies and translate abstract regulatory requirements into concrete engineering controls.
Cross-Functional Facilitation: Strong stakeholder management skills with a history of driving accountability across distributed engineering, product, and operations teams.
Similar roles
Senior Security Operations Analyst, Detection & Response
Financeit·Toronto, Canada
Who we are: Financeit is a point-of-sale financing provider serving some of the largest home improvement and retail organizations in Canada. Our platform helps businesses close more sales by offering customers affordable monthly payment options for their next big home improvement, vehicle or retail purchase. We are small enough that you can make an impact within the company and large…
- Hybrid
- Full-time
- Express Entry — PR day one, no employer
Tech-Guy / Automatisierungsexperte (m/w/d)
Versianer - Eine Marke der Versuro Gruppe·Münster, Germany
Du hast ein Faible für Fable, Automatisierung, Klick-Workflows und smarte Verzahnung von Tools – und willst genau das für ein wachsendes Maklerhaus in Münster aufbauen? Als Tech-Guy bei VERSIANER / Makler mit Fliege verantwortest du unsere digitale Infrastruktur: von Make-Szenarien über Funnels bis zur Verbindung unserer Tools (CRM, KI, Kommunikation, Marketing). Du bekommst viel Gestaltungsspielraum und baust Automationen, die sonst…
- On-site
- Full-time
- Blue Card — tied; settle 21–33mo
Project Manager
UTTR·Worldwide
UTTR stands for "up & to the right." For us, it resonates on multiple dimensions - it's the trajectory we envision for our clients in their outcomes, our aspiration for agency growth, and the path we hope every team member carves for their own career. As a Project Manager at UTTR, you will play a crucial role in our…
- Remote
- Full-time
Founder's Office: Strategy & AI Operations
Parallelz·Toronto, Canada
ABOUT PARALLELZ Parallelz is building a new way for mobile apps and games to reach users. Our platform turns native mobile apps into fully native web experiences in real time, with no SDK, no code changes, and no engineering lift from the developer. We are based in Toronto and backed by Global Founders Capital, Play Ventures, Maple VC, Two Small…
- Hybrid
- Full-time
- Express Entry — PR day one, no employer
Vice Chair Office, Strategy & Operations
Stripe·Worldwide
WHO WE ARE ABOUT STRIPE Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead.…
- Full-time
Rugby Systems Operator
Hawkeyeinnovations·Worldwide
RUGBY SYSTEMS OPERATOR Location: Within a commutable distance of the Basingstoke office, with willingness to travel to matches/events Contract: Full-Time, Permanent Travel: There will be travel domestically, with potential travel across Europe and globally Expected Start Date: ASAP WHY HAWK-EYE & WHY RUGBY? Hawk-Eye provides video replay services across a wide number of local and global Rugby events, including domestic…
- On-site
- Full-time
Senior Performance Marketing Manager (Part-Time)
UTTR·Worldwide
UTTR is on the lookout for a part-time Performance Marketing Manager. You'll be responsible for shaping marketing strategies and cultivating deep, trusted partnerships with our core clients. At UTTR, we believe in “up & to the right” — sustainable, measurable growth. Your expertise will guide clients toward achieving SMART goals while navigating the multifaceted landscape of B2B digital marketing. This…
- Remote
- Contract
Head of Product @ Koast.ai
Koast.ai·Worldwide
Head of Product | Contract, 20 hrs/week to start, growing into full-time | Remote (US overlapping hours) | Reports to the CEO THE SHORT VERSION Koast is the AI operating layer for teams that run Meta ads at volume. Agencies, in-house media buying teams, and enterprise buyers managing 10+ ad accounts and launching 50+ ads a week use Koast to…
- Remote
- Contract
