Group Security & Compliance Manager

Accountabilities Lead customer security reviews, RFPs, RFIs, and security questionnaires by providing accurate, timely, and business-focused responses that support customer relationships.

Build and maintain a customer-facing trust portal, including security documentation and dedicated AI compliance resources.

Own SOC 2 Type II program management, coordinating audit preparation, evidence collection, auditor relationships, and compliance activities across multiple environments.

Develop, maintain, and improve security policies, procedures, and documentation, including data processing agreements, sub-processor lists, and incident communication templates.

Establish and manage AI compliance initiatives, including AI security questionnaires, AI vendor assessments, framework monitoring, acceptable-use policies, disclosure practices, and incident response processes.

Track evolving AI governance standards such as ISO 42001, NIST AI Risk Management Framework, and emerging regulations.

Manage third-party vendor security reviews, assessments, and renewal processes.

Create and deliver security awareness training programs for internal teams.

Support customer onboarding by ensuring security requirements and compliance expectations are clearly addressed.

Coordinate customer-facing security communications, including incident notifications, in collaboration with legal and engineering teams.

Act as a trusted security advisor, representing the organization during enterprise security discussions and customer engagements.

Requirements

6+ years of experience in security governance, risk, compliance, customer trust, or SaaS security programs.

Strong experience managing customer-facing security processes and enterprise security reviews.

Proven experience as a primary contact for SOC 2 audits, with Type II experience strongly preferred.

Excellent written and verbal English communication skills, with the ability to confidently engage customers, auditors, and external stakeholders.

Strong understanding of cloud security concepts and the ability to interpret technical findings and translate them into business-focused insights.

Experience developing security policies, compliance documentation, and governance frameworks.

Knowledge of AI compliance concepts and willingness to lead emerging AI governance initiatives.

Ability to work independently, manage multiple priorities, and operate effectively in a fast-paced remote environment.

Strong collaboration skills with technical, legal, and business teams.

Nice to have:

CISSP, CISA, or CIPP/E certification.

Experience with trust management platforms such as Vanta, Drata, SafeBase, or equivalent tools.

Background working with private-equity-backed organizations or multi-company environments.

Familiarity with ISO 42001, NIST AI RMF, and AI regulatory frameworks such as the EU AI Act.

Benefits

Fully remote and global work environment with flexibility to work from anywhere.

Flexible working hours with an asynchronous work culture focused on outcomes.

Opportunity to lead high-impact security and compliance initiatives across multiple organizations.

Professional growth support through feedback, career development opportunities, and access to advanced tools and resources.

Exposure to industry experts, webinars, and emerging technology discussions.

Home office setup stipend to create an effective remote workspace.

Collaborative culture with virtual events, team activities, coffee chats, and community initiatives.

Opportunity to shape security programs from the ground up in a growing technology environment.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1