Compliance Engineering Lead

Socket is seeking a remote Compliance Engineering Lead in the United States (full‑time) to own and engineer the company’s compliance program. The role reports to the CISO and includes end‑to‑end responsibility for SOC 2 Type II, ISO 27001 certification, automated evidence collection, risk and vendor management, and the customer‑facing trust portal. The hire will also define the AI assurance strategy and build a small team focused on security questionnaires and contract review.

Key details

• Remote, full‑time position in the United States
• Own SOC 2 Type II and ISO 27001 certification processes
• Develop automated evidence‑collection pipelines across GCP, GitHub, and other systems
• Manage risk registers and third‑party vendor risk programs
• Define and implement AI assurance posture