Secure Data with Us We're seeking a skilled Security and Compliance Specialist to safeguard our systems, data, and operations. This role involves maintaining the security and compliance posture of our fast-growing tech company. In this position, you'll manage security compliance activities across the organization, ensuring alignment with frameworks like SOC 2 Type 2 and GDPR. You'll oversee daily operations in our compliance platform (Drata), tracking control failures, evidence updates, alerts, and policy renewals. 1. Manage and maintain security compliance activities to ensure alignment with relevant frameworks. 2. Oversee daily operations in the compliance platform, tracking key performance indicators. 3. Coordinate evidence collection and control mapping to support ongoing audit readiness. 4. Maintain documentation related to GDPR, vendor DPAs, and handle Data Subject Requests. 5. Collaborate with internal teams to implement new certifications and update security controls as technology and regulations evolve. 6. Monitor device compliance and configurations through Apple Business Manager and Kandji. 7. Track access control for company-managed computers and hardware security tools like Yubikeys. 8. Respond to incoming security questionnaires and due diligence requests, coordinating answers across departments. 9. Proactively identify vulnerabilities and recommend improvements to ensure a strong security culture. Requirements To succeed in this role, you'll need: - A strong understanding of SOC 2, GDPR, or other security/compliance frameworks. - Experience with tools like Drata, Kandji, and Apple Business Manager. - Strong organizational and project management skills. - Ability to communicate clearly across technical and non-technical teams. - A process-oriented mindset with a focus on continual improvement. - Confidence in managing documentation, audits, and cross-functional collaboration. - A passion for keeping systems secure and data protected. Benefits You'll enjoy: - A dynamic and fast-paced environment with real ownership over your domain. - Opportunities to grow your security expertise and explore new compliance frameworks. - A collaborative team culture with support from leadership and peers. - Flexibility with remote work options and work-life balance. - The chance to make a tangible impact on how we protect customer data and meet evolving standards.