Security Compliance Manager, SonderMind

• 5+ years in information-security compliance, ideally within a SaaS environment
• Demonstrated ownership of at least one full SOC 2 Type 2 audit cycle
• Strong project-management skills: ability to run parallel work-streams, influence without authority, and meet tight deadlines
• Working knowledge of common control frameworks (SOC 2, ISO 27001, NIST CSF, etc..)
• Familiarity with security tooling for evidence collection (e.g., Vanta) and ticketing systems (Jira)
• Excellent written and verbal communication; adept at translating control requirements for technical and non-technical audiences

Desirable

• Sondermind seeking a Security Compliance Manager who will operate as the project manager for our security and compliance program
• You will drive policy creation, coordinate cross-functional ownership through RACI alignment, and ensure continuous compliance with ISO 27001 and other frameworks
• Success is measured by audit readiness, completion of recurring control activities, and clear visibility of compliance posture to leadership
• Draft, publish, and maintain information-security and privacy policies, standards, and procedures
• Establish a living compliance calendar covering control tests, access reviews, vendor assessments, and policy refresh cycles
• Facilitate working sessions so Engineering, IT, PeopleOps, and Legal understand their accountability for controls such as vulnerability management, change management, and incident response, etc..
• Track and report control ownership status; escalate gaps or overdue actions
• Lead annual ISO 27001 audits end-to-end: scoping, readiness assessments, evidence collection, auditor coordination, and remediation follow-up
• Maintain audit work-papers and a centralized evidence repository
• Execute and document periodic controls: quarterly user access reviews, privileged-access attestations, vendor risk assessments, business continuity tests, and vulnerability-remediation SLAs
• Automate evidence capture wherever feasible through tooling integrations (e.g. , Vanta, Jira, Slack)
• Conduct security risk assessments for new products and vendors; track mitigation plans to closure
• Update policies and training content in response to regulatory and industry changes.
• Generate KPIs and board-level metrics on compliance health, audit findings, and risk trends
• Develop and deliver role-based security and privacy training; ensure coverage and completion tracking
• Promote a culture of accountability through regular communications, lunch-and-learns, and compliance office hours
• You will be the main point of contact for all things compliance at Sondermind, giving you autonomy to shape processes, introduce automation, and drive a measurable security culture. Your work will ensure we scale securely and retain the trust of millions of users