СШАIT & Compliance Manager
2 нед. назад
СШАRemote
soc 2iso 27001gdprsystem access controlssecurity controlscloud infrastructurevulnerability managementincident response
Responsible for managing and scaling compliance, security, privacy, and IT programs including SOC 2 compliance and ISO 27001 certification readiness.
О компании
- is building the "operating system for the physical shelf." We use spatial computing and wearable AI to provide real-time, store-level insights that were previously impossible to capture. We are moving fast, and our data needs to move even faster—while remaining hyper-accurate.
Обязанности
- We are looking for a hands-on Compliance & IT Manager to own and scale our compliance, security, privacy, and IT programs. This role will manage our ongoing SOC 2 compliance, lead preparation for ISO 27001 certification, support GDPR and EU AI Act requirements, and partner closely with Engineering and Infrastructure on security and technology needs.
- Own and maintain the SOC 2 compliance program , including controls, evidence collection, audits, and remediation.
- Lead ISO 27001 certification readiness , including the ISMS, risk assessments, policies, controls, and audit preparation.
- Maintain GDPR, privacy, and EU AI Act documentation and compliance processes.
- Manage system access controls , including employee provisioning, access reviews, and offboarding.
- Own IT equipment provisioning and lifecycle management , including inventory, deployment, recovery, and security.
- Partner with Engineering and Infrastructure on security controls, cloud infrastructure, system documentation, vulnerability management, backups, and incident response .
- Manage security and compliance assessments for vendors and third parties .
- Maintain security, privacy, and IT policies and procedures and ensure they are operationalized across the company.
- Identify compliance and security gaps and work with teams to drive remediation.
- Support internal and external security, privacy, and compliance audits.
- Own the company's IT asset lifecycle , including hardware and software procurement, provisioning, inventory, licensing, renewals, access, security, and deprovisioning.
- Provide general IT helpdesk support to internal employees , troubleshooting common hardware, software, access, and account issues and coordinating escalation when needed.
Требования
- 4+ years of experience in compliance, information security, IT, privacy, or a related field.
- Hands-on experience with SOC 2 and preferably ISO 27001 .
- Working knowledge of GDPR, privacy, and AI governance , including the EU AI Act.
- Understanding of access management, endpoint security, IT operations, and security fundamentals.
- Comfortable working directly with Engineering and Infrastructure teams.
- Strong organizational and documentation skills.
- Comfortable operating in a fast-paced startup environment and building processes from the ground up.
- Experience with tools such as Vanta, Google Workspace, cloud infrastructure, and/or MDM is a plus.
- offers benefits inclusive of medical, dental, vision, and 401k. The salary range for this role is $125,000 USD - $165,000 USD +equity