Compliance Lead – Part-time, Contractor

Soda

. Own Soda's compliance function and continue building it .

Posted 11/3/2026part-timeRemote • Belgium, United Kingdom, United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing compliance functions, particularly in SOC 2 Type II cycles, while leveraging automation tools to enhance efficiency and maintain audit readiness. Proficient in collaborating with stakeholders and conducting enterprise security reviews in a B2B SaaS environment.

Highest-signal resume keywords

SOC 2 Type II ManagementCompliance AutomationAWS ProficiencySecurity Questionnaire ResponseGRC Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Compliance Automation PlatformSOC 2 Type II Cycle ManagementIncident ReportingPolicy WritingAI Implementation

Soft Skills

Clear CommunicationJudgment in Policy Design

Tools & Technologies

DrataVantaSecureframeOktaGitHub

Certifications & Qualifications

CISACISMCIPP/EISO 27001 Lead Implementer

Industry Keywords

Security ComplianceGRCB2B SaaSISO 27001Enterprise Security Reviews

Tech Stack

Tools & technologies

AWS

About the role

Key responsibilities & impact

Own Soda's compliance function and continue building it
Push automation of the compliance program to reduce manual tasks and evidence gathering
Adapt compliance posture and controls to AI-driven product and operational changes
Improve RFP and security-questionnaire response efficiency using existing and expanded tooling
Own the annual SOC 2 Type II and SOC 3 cycle with the external auditor, including planning, access, samples, reporting, and closing findings
Keep the control set audit-ready year-round by monitoring lapses, failures, and outstanding actions
Run people compliance processes, including onboarding, offboarding, annual security training, code of conduct, incident reporting, and phishing cycles
Partner with Sales on enterprise security reviews and unblock deals without overpromising
Manage engineers and operational stakeholders to complete compliance tasks and provide evidence
Build scripts, integrations, prompts, and AI-assisted workflows that withstand auditor scrutiny
Independently manage the agenda and flag decisions requiring company input

Requirements

What you’ll need

3+ years in security compliance / GRC, ideally at a B2B SaaS company
You have run a SOC 2 Type II cycle hands-on, including working directly with an external auditor through scoping, sampling and remediation
Hands-on with a compliance automation platform: Drata ideally, or Vanta / Secureframe
Comfortable designing and implementing automations, including with AI
Comfortable with AWS, Okta, GitHub, and endpoint management
Comfortable answering enterprise security questionnaires and holding your own live in a customer security review
Clear written and spoken English, and the judgement to write a policy people can actually follow
Available roughly 2–3 days per week, with solid working-hours overlap with CET
Must be working in an EU time zone
Able to invoice as a freelancer / contractor
Technical experience, experience in a company under 200 people, ISO 27001 experience, and certifications such as CISA, CISM, CIPP/E or ISO 27001 Lead Implementer are nice to have

Benefits

Comp & perks

A real mandate to build a modern, forward-looking compliance system that keeps pace with and leverages opportunities created by the new AI reality
A live, certified programme with enterprise customers depending on it, with full freedom to implement improvements
A documented starting point: runbooks for every manual control, a scheduling system that tells you what's due, and a full written handover from your predecessor
An AI-forward company that will actually fund and use what you build
Direct access to decision-makers; no layers between you and the people who can fix things
A competitive contractor rate