Director, Security and Compliance
Rebuy, Inc. · Remote · Remote - US ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Fully remote (US/Canada)
- Senior leadership role
- SOC 2 & GDPR focus
- GCP cloud environment
- $175k-$200k USD
You will own the company’s security, compliance, privacy, and IT functions, reporting directly to the COO. This hands-on leadership position requires driving initiatives across governance, risk management, and technical security without formal authority over all teams.
The role covers everything from incident response and vulnerability management to endpoint administration and budget oversight. You will ensure secure cloud infrastructure and data governance while supporting a distributed workforce in the U.S. and Canada.
What you'll do
- Lead compliance programs including SOC 2 Type 2, GDPR, and CCPA audits
- Manage security policies, risk assessments, and vendor reviews
- Own business continuity planning and disaster recovery testing
- Handle data governance, privacy documentation, and subject requests
- Direct incident response and coordinate regulatory notifications
- Run vulnerability management and annual penetration testing
- Set application security standards and secure cloud infrastructure
- Administer endpoint fleet, SaaS platforms, and IT support
What you'll need
- 8+ years in security and GRC with SOC 2 ownership experience
- Hands-on experience securing major cloud environments, preferably GCP
- Working knowledge of GDPR, CCPA, and data governance practices
- Experience with compliance automation and macOS device management
- Ability to administer and secure broad SaaS environments
- Fluency in application security concepts like OWASP and CI/CD
- Strong communication skills for influencing without authority
- Self-directed work style suitable for a fast-moving remote team
Nice to have
- Experience within the Shopify ecosystem
- Workflow automation or scripting capabilities
- Certifications such as CISSP, CISM, CCSP, or CIPP
Stack
- GCP
- SOC 2
- GDPR
- CCPA
- Vanta
- Orca
- Iru
- macOS
- Shopify
How you'll work
- Fully remote within the United States and Canada
- Requires strong internet connection
- Reports quarterly to executive leadership
What you get
- Flexible vacation policy and generous holidays
- Parental leave and sick policy included
- 100% free health, dental, and insurance for family
- 401(k) for US employees, TFSA/RRSP for Canadian
- 3% retirement contribution regardless of location