The Opportunity

We're looking for a Compliance Engineer to join our team and drive client compliance programs from implementation through audit completion. You'll work directly with startup founders, engineering teams, and auditors to deliver compliance across frameworks like SOC 2, ISO 27001, HIPAA, and GDPR.

This is a hands-on role. You'll configure and manage GRC platforms (Vanta, Drata, SecureFrame), work inside client cloud environments (AWS, Azure, GCP), and translate complex regulatory requirements into clear, actionable engineering and process steps. Your work ensures clients earn and maintain the trust of their customers.

You'll collaborate with our engineers, penetration testers, and leadership team to refine internal processes and scale our compliance practice.

What You'll Bring

1. 3+ years of experience in security, compliance, or risk management with direct involvement in SOC 2, ISO 27001, HIPAA, or GDPR engagements.
2. Hands-on cloud experience across one or more platforms: AWS, Azure, GCP, DigitalOcean, or Render.
3. Working experience with commercial GRC platforms such as Vanta, Drata, SecureFrame, Thoropass, or Tugboat Logic.
4. Strong project management skills with the ability to manage multiple client engagements simultaneously.
5. Fluent in English and Spanish (written and verbal).
6. Excellent communication skills with the ability to explain technical and regulatory topics to non-technical stakeholders.
7. Comfortable working independently in a fast-paced, consulting-style environment.

What Sets You Apart

1. Certifications such as CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Auditor.
2. Previous consulting experience with startups or SaaS companies.
3. Background in cloud security architecture, DevOps, or infrastructure engineering.
4. Experience conducting or supporting penetration testing or vulnerability assessments.
5. Familiarity with NIST CSF, NIST 800-53, PCI DSS, or CIS Controls.

Ideal Qualities

• Honest and transparent in client and team communication
• Compassionate in working with clients navigating compliance for the first time
• Humble and open to feedback
• Collaborative across technical and non-technical teams
• Teachable with a genuine interest in continuous learning

Why You'll Love Working With Us

You'll work with top-tier U.S. clients in a fully remote environment with flexible hours. Every engagement brings unique challenges across different industries and tech stacks. We value input from every team member and invest in the growth of our people. If you want to do meaningful compliance work without the bureaucracy of a large firm, this is the role.