Compliance Engineering Lead
Socket Security · United States
About this role
**Compliance Engineering Lead** **About Socket** Socket helps devs and security teams ship faster by cutting out security busywork. Thousands of orgs use Socket to safely find, audit, and manage open source code. Founded by Feross Aboukhadijeh, Socket has raised $125M in funding from top angels, operators, and security leaders. **About the Role** Own compliance as an engineered system. This is a foundational, deliberately engineering-focused role reporting directly to the CISO. You'll own the compliance program end-to-end, including SOC 2 Type II, ISO 27001 certification, risk management, vendor programs, and customer-facing assurance. You'll hire and lead your first teammate focused on security questionnaires and contract review. **Key Responsibilities** • Own SOC 2 Type II end-to-end: observation window, auditor relationship, evidence pipeline, and customer-facing report • Lead Socket through ISO 27001 certification and maintain the ISMS • Automate evidence collection from GCP, GitHub, identity providers, MDM, and ticketing systems • Build control monitoring that alerts on drift immediately • Establish risk management and vendor risk programs with real tiering and renewal cadence • Launch and maintain customer trust portal and assurance artifacts • Scope AI assurance posture (ISO/IEC 42001, NIST AI RMF, EU AI Act) **What You'll Bring** • Personally owned at least two full SOC 2 Type II cycles as the accountable person • ISO 27001 depth: certification experience or ISMS surveillance audit experience • Build automations against services (GCP, GitHub, etc.) • Hands-on experience with compliance platforms (Drata, Vanta, or similar) • Clear judgment to prioritize real risk vs. formatting preferences • Writing that works for auditors, security reviewers, engineers, and executives • Experience in remote, fast-moving environments **Nice to Have** AI governance frameworks exposure, security vendor experience, contract security review background, in-house compliance automation building. **Benefits** Market competitive salary, meaningful equity, comprehensive health benefits (99% coverage), flexible time-off, paid parental leave, remote-first with quarterly team off-sites.
Listing freshness
CronJobs last confirmed this listing 23h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.