Remote•Remote
Remote
Mid Level
Full Time
💰$102,899 - $137,718
remotecompliancegovernancerisk managementSOC 2ISO 27001audittechnology startup
Requirements
- •5+ years experience in governance, risk, compliance, information security compliance or related role
- •End-to-end ownership of SOC 2 and ISO 27001 programs in fast-moving technology environment
- •Experience managing external audits and certification processes
- •Strong understanding of risk management, control design, ISMS governance, and compliance program operations
- •Experience adapting compliance controls to organization's environment
- •Familiarity with cloud-based technology environments and distributed workforce security
- •Strong project management and organizational skills
- •Excellent written and verbal communication skills
- •Hands-on mindset and willingness to execute compliance work
- •Curiosity about AI, automation, and emerging technology for compliance workflows
What You'll Do
- •Own and drive governance, risk, and compliance program focusing on compliance
- •Maintain and evolve compliance program including SOC 2 and ISO 27001 certifications
- •Design and tailor controls, collect evidence, train internal teams, work with auditors, manage remediation
- •Build strong working relationships across multiple teams
- •Manage audit activities including control testing, evidence collection, stakeholder coordination, auditor requests, findings, and remediation
- •Maintain risk register, ISMS processes, policies, and compliance documentation
- •Support customer-facing compliance activities including security questionnaires
- •Lead through audit or major certification milestones
- •Establish compliance program operating rhythm and roadmap
- •Identify control gaps, assess risk, recommend solutions, and drive remediation
- •Introduce automation and process improvements to reduce manual compliance work
Nice to Have
- •Experience with additional frameworks such as GDPR, HIPAA, HITRUST, FedRAMP, FISMA, PCI DSS
- •Experience supporting security questionnaires and sales-related compliance activities
- •Experience with GRC platforms and compliance automation tools
- •Relevant certifications such as CISA, CISSP, ISO 27001 Lead Implementer or Lead Auditor, CRISC
Benefits
- •Above-market salaries
- •Meaningful equity
- •Generous perks and benefits
About Sourcegraph
The complete AI SDLC platform where devs can compose code, contextualize knowledge, and catalyze delivery.
San Francisco, CA, US
100 - 200
Developer Tools