Security & Compliance Manager
- Role
- Security
- Experience
- Mid
- Employment
- Full-time
Open to US only. Set where you work from to check your eligibility.
No BS summary
Security and compliance manager with 3–5 years in information security, privacy, governance, compliance, or risk management. Must have SOC 2 Type II, ISO 27001, Vanta or similar GRC platforms, and GDPR/CCPA knowledge in a SaaS or cloud-first environment. US remote role requiring legal authorization to work.
Core skills
Required skills
Optional skills
What Relocity is Doing Relocity is reimagining the global mobility experience. We enable enterprises to attract, retain, and engage talent globally. Powered by our AI-driven workforce mobility platform, we bring together local experts and insightful content in our native mobile app to deliver an excellent user experience for people on the move. Our core values drive us to focus on our customers, innovation, integrity, and excellence. Relocity serves hundreds of cities in more than 40 markets across the United States, Europe, and Asia. What You Will Do Relocity is seeking an experienced Security & Compliance Manager to maintain and strengthen our information security, privacy, and data governance programs. Reporting into leadership, you will partner closely with Engineering, Product, Operations, and G&A to keep our systems, processes, and policies aligned with evolving regulatory and security requirements as the company grows. Our compliance foundation is already established. You will own the ongoing maintenance of our SOC 2 Type II program, lead our ISO 27001 certification effort to completion, and continuously improve our governance and risk management practices. You will use Vanta as our compliance platform to streamline monitoring, evidence collection, and audit readiness. How You Will Do It Security & Compliance Maintain SOC 2 Type II compliance, including control operation, evidence collection, and annual audit readiness. Lead the ISO 27001 certification effort, from gap assessment through certification and ongoing surveillance. Own additional security and privacy frameworks, including GDPR, CCPA, and other applicable regulations. Serve as the company's primary advisor on security, privacy, and compliance strategy. Risk & Governance Establish and continuously improve security controls, governance standards, policies, and risk management practices. Conduct security risk assessments, manage incident response, and drive remediation efforts. Administer Vanta and related tooling to automate compliance monitoring, continuous control testing, and audit workflows. Cross-Functional Partnership Partner with Engineering, Product, Operations, Legal, and leadership to embed security and privacy into products, systems, and business processes. Translate technical risk into practical business recommendations that inform strategic decisions. Data Protection & Awareness Define enterprise data governance standards, including data classification, retention, and lifecycle management. Lead company-wide security awareness initiatives that promote responsible data stewardship. Continuous Improvement Monitor evolving regulations, emerging threats, and industry best practices to strengthen our security program. Evaluate and implement technologies and processes that improve automation, visibility, and operational efficiency. What Will Enable Your Success Experience: Three to Five years in information security, data privacy, governance, compliance, or risk management. Compliance Leadership: Direct experience maintaining SOC 2 Type II and leading or supporting ISO 27001 certification within a SaaS or cloud-first environment. Compliance Automation: Hands-on experience with Vanta or comparable GRC platforms such as Drata, Secureframe, or Sprinto. Privacy Expertise: Strong working knowledge of GDPR, CCPA, and other applicable privacy regulations. Governance: Demonstrated success designing and implementing data classification, retention, privacy, and security programs. Technical Aptitude: Familiarity with cloud infrastructure, SaaS environments, identity and access management, and security controls. Communication: Ability to explain complex technical concepts to technical and non-technical audiences. Cross-Functional Leadership: Proven ability to influence stakeholders and lead initiatives across multiple functions. Education: Bachelor's degree in Information Security, Computer Science, Information Systems, Business, Legal Studies, or a related field, or equivalent practical experience. Nice to Have Professional certifications such as CIPP/US, CIPM, CISSP, CISM, or CRISC. Experience in a high-growth SaaS or technology startup environment. Knowledge of privacy-by-design principles. How We Support You and Work-Life Balance... Competitive Compensation Paid Time Off Paid Parental Leave Remote Workplace Flexible Work Schedules Health, Dental, Vision, and LTD Insurance 401(k) Professional Development Opportunities Salary Range: $140,000 - $170,000 + bonus Relocity is an Equal Opportunity Employer and does not discriminate against any applicant on the basis of race, color, religion/creed, national origin, gender, sex, marital status, age, disability, use of a guide dog or service animal, sexual orientation, military/veteran status, or any other status protected by federal, state, or local law. Relocity will only employ individuals who are legally authorized to work. Any offer of employment is conditioned upon the successful completion of a background investigation. #LI-Remote #LI-AC2
What you'll do
- Maintain and strengthen information security, privacy, and data governance programs.
- Partner closely with Engineering, Product, Operations, and G&A to keep systems, processes, and policies aligned with evolving regulatory and security requirements.
- Own the ongoing maintenance of the SOC 2 Type II program.
- Lead the ISO 27001 certification effort to completion.
- Continuously improve governance and risk management practices.
- Use Vanta to streamline monitoring, evidence collection, and audit readiness.
- Maintain SOC 2 Type II compliance, including control operation, evidence collection, and annual audit readiness.
- Lead the ISO 27001 certification effort, from gap assessment through certification and ongoing surveillance.
- Own additional security and privacy frameworks, including GDPR, CCPA, and other applicable regulations.
- Serve as the company's primary advisor on security, privacy, and compliance strategy.
- Establish and continuously improve security controls, governance standards, policies, and risk management practices.
- Conduct security risk assessments, manage incident response, and drive remediation efforts.
- Administer Vanta and related tooling to automate compliance monitoring, continuous control testing, and audit workflows.
- Partner with Engineering, Product, Operations, Legal, and leadership to embed security and privacy into products, systems, and business processes.
- Translate technical risk into practical business recommendations that inform strategic decisions.
- Define enterprise data governance standards, including data classification, retention, and lifecycle management.
- Lead company-wide security awareness initiatives that promote responsible data stewardship.
- Monitor evolving regulations, emerging threats, and industry best practices to strengthen the security program.
- Evaluate and implement technologies and processes that improve automation, visibility, and operational efficiency.
What they require
- Three to Five years in information security, data privacy, governance, compliance, or risk management.
- Direct experience maintaining SOC 2 Type II and leading or supporting ISO 27001 certification within a SaaS or cloud-first environment.
- Hands-on experience with Vanta or comparable GRC platforms such as Drata, Secureframe, or Sprinto.
- Strong working knowledge of GDPR, CCPA, and other applicable privacy regulations.
- Demonstrated success designing and implementing data classification, retention, privacy, and security programs.
- Familiarity with cloud infrastructure, SaaS environments, identity and access management, and security controls.
- Ability to explain complex technical concepts to technical and non-technical audiences.
- Proven ability to influence stakeholders and lead initiatives across multiple functions.
- Bachelor's degree in Information Security, Computer Science, Information Systems, Business, Legal Studies, or a related field, or equivalent practical experience.
- Preferred: Professional certifications such as CIPP/US, CIPM, CISSP, CISM, or CRISC.
- Preferred: Experience in a high-growth SaaS or technology startup environment.
- Preferred: Knowledge of privacy-by-design principles.
- Relocity will only employ individuals who are legally authorized to work.
- Any offer of employment is conditioned upon the successful completion of a background investigation.
Benefits
- Competitive Compensation
- Paid Time Off
- Paid Parental Leave
- Remote Workplace
- Flexible Work Schedules
- Health, Dental, Vision, and LTD Insurance
- 401(k)
- Professional Development Opportunities
- bonus
Relocity is reimagining the global mobility experience. We enable enterprises to attract, retain, and engage talent globally. Powered by our AI-driven workforce mobility platform, we bring together local experts and insightful content in our native mobile app to deliver an excellent user experience for people on the move.