Risk & Compliance Manager, Built Technologies

• We are seeking a Risk & Compliance Manager who thrives at the intersection of security, compliance operations, risk management, and cross-functional collaboration
• 7-8 years of experience in security compliance, audit readiness, or risk management
• Hands-on experience with SOC 2 or similar frameworks (ISO 27001, PCI, SOX)
• Strong understanding of control requirements and evidence validation
• Excellent communication and documentation skills
• Experience with compliance platforms such as Drata, Vanta, AuditBoard, or similar
• Ability to manage multiple concurrent projects, deadlines, and stakeholders
• Strong organizational and analytical skills with exceptional attention to detail
• Ability to translate compliance requirements into clear, actionable guidance
• A collaborative mindset and comfort working across technical and non-technical teams
• A proactive approach to identifying risks, gaps, and opportunities for improvement

Desirable

• This role is both strategic and hands-on, owning key components of Built’s SOC program, client assurance processes, and ongoing governance responsibilities across the organization
• The Risk & Compliance Manager supports and maintains Built’s security and compliance posture by managing external audits, client due diligence engagements, compliance tooling, and recurring risk and controls activities
• This highly visible role works closely with teams across Security, IT, Engineering, Product, Payments, HR, and Operations to ensure Built remains audit-ready and aligned to industry and regulatory expectations
• This is an individual contributor role with no direct people management responsibilities
• Respond to and manage client security assessments, questionnaires, and due-diligence requests
• Provide compliance documentation and evidence through Built’s Trust Center
• Participate in client review meetings and coordinate internal follow-ups as needed
• Coordinate the full lifecycle of Built’s annual SOC 1 and SOC 2 audits, including evidence collection, stakeholder scheduling, and auditor communication
• Maintain Built’s control environment within Drata and ensure ongoing audit readiness
• Administer Built’s Trust Center (Conveyor), ensuring documents, policies, and audit materials are accurate and up-to-date
• Manage client access requests and support users with navigation and content inquiries
• Support annual payments compliance activities (e.g., AML/Sanctions training, Nacha audit) in partnership with external consultants and internal stakeholders
• Conduct periodic internal reviews of payments processes to ensure adherence to policies and partner expectations
• Manage the lifecycle of Built’s policies and procedures, ensuring updates, annual reviews, and publication to the Trust Center
• Maintain core compliance documentation, including audit records, incident logs, attestations, and internal reporting
• Support ongoing monitoring and upkeep of compliance and security controls across the organization
• Track and coordinate recurring compliance tasks managed through Jira automations
• Partner with Learning & Development to manage annual and onboarding compliance/security training and ensure completion across the organization
• Participate in vendor reviews within the procurement process and maintain the Significant Vendor Index
• Support the annual enterprise risk assessment and track mitigation activities
• Manage inbound data subject access requests (DSARs) and coordinate responses in alignment with regulatory and internal requirements