Information Security & GRC Manager
The Smart · San Francisco, CA, United States ·
COMPENSATION
€•• – ••k
Listed on WeAreDevelopers
- Fully remote (EU/US)
- SOC 2 Type II focus
- Senior management role
- SaaS security compliance
- Visa sponsorship likely
You will own the day-to-day execution of Scribe's security and compliance program, ensuring audits reflect actual security practices. Working closely with Legal, Sales, and Engineering, you will handle enterprise security questionnaires and maintain internal controls for a rapidly growing platform used by Fortune 500 companies.
What you'll do
- Manage SOC 2 Type II audits end-to-end, including evidence collection and gap closure
- Lead enterprise customer security reviews and maintain the trust center documentation
- Provide technical input on security commitments in customer contracts and MSAs
- Maintain risk registers, security policies, and vendor review processes
- Translate audit findings into concrete engineering tasks and track remediation
- Operate internal security programs like access reviews and vulnerability management
What you'll need
- 6+ years in information security, GRC, or compliance at a SaaS company
- 2+ years of experience managing individual contributors
- Hands-on experience running SOC 2 Type II audits as primary owner
- Experience handling enterprise security questionnaires with cross-functional teams
- Working knowledge of cloud security, IAM, endpoint security, and vulnerability management
- Familiarity with ISO 27001, HIPAA, FERPA, and AI governance frameworks
- Ability to prioritize risks based on business context rather than rigid rules
Nice to have
- CISSP, CISM, or CISA certification
- Experience with GRC automation platforms like Vanta, Drata, or Secureframe
- Background in scaling security teams at global technology companies
Stack
- SOC 2
- ISO 27001
- HIPAA
- FERPA
- Vanta
- Drata
- Secureframe
- Cloud Security
- IAM
How you'll work
- Remote-first culture with flexibility for hobbies and family time
- Collaborative environment with Legal, Sales, and Customer Success teams
What you get
- Opportunity to grow expertise within a high-growth function
- Work with a LinkedIn Top Startup valued at over $1B