FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in risk assessment, compliance program operations, and internal audits, with a strong focus on SOC 2 and ISO 27001 controls. Proficient in utilizing compliance platforms and evidence collection from various systems to ensure audit readiness and effective risk management.
Highest-signal resume keywords
Risk AssessmentSOC 2 ComplianceISO 27001 ComplianceCompliance Platform ExperienceInternal Audit Support
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Risk Register ManagementControl TestingEvidence CollectionControl ValidationRemediation Tracking
Soft Skills
Clear CommunicationAdaptabilityCollaboration
Tools & Technologies
DrataVantaAWSGCPGoogle WorkspaceOkta
Industry Keywords
GRCSecurity ComplianceSaaSTechnology Company
Tech Stack
Tools & technologiesAWSGoogle Cloud Platform
About the role
Key responsibilities & impact- Run risk assessments across the company and major product changes
- Score likelihood and impact, propose treatments, and present results to leadership to inform risk tolerance decisions
- Maintain the risk register, track remediation to closure, and report status to compliance and security leadership
- Monitor controls on a rolling basis using automated and manual testing
- Triage control failures, prioritize findings by the risk register, and assign owners and due dates
- Support internal audits by proposing scope, supplying evidence, and tracking findings to closure
- Run day-to-day compliance program operations, including evidence collection, control owner follow-up, and audit readiness
- Extend continuous control validation beyond the compliance platform
- Build custom tests with AI coding tools
- Work with engineering and IT to pull evidence from source systems and validate that tests prove control requirements
Requirements
What you’ll need- 3+ years of experience in GRC, internal audit, or security compliance at a SaaS or technology company
- Comfortable working with SOC 2 and ISO 27001 controls
- Experience with a compliance platform such as Drata or Vanta
- Experience with evidence from systems such as AWS, GCP, Google Workspace, and Okta
- Clear communication across technical and non-technical audiences
- Experience in async or globally distributed teams
- Comfortable navigating ambiguity and moving quickly
Benefits
Comp & perks- Fully remote
- WeWork membership or co-working allowance usable anywhere in the world
- ESOP (equity ownership) for every team member
- Tech allowance for laptop, monitor, headphones, or other work equipment
- Supabase covers 100% of health insurance for employees and 80% for dependents
- Annual company off-sites
- Flexible, asynchronous work
- Annual education allowance for courses, books, conferences, or other professional development