USA - Remote
Remote
Senior
Full Time
about 1 month ago
remotesecurityGRCSOC 2complianceAI-positiveautomation
Requirements
- •5+ years of experience building Security & Trust programs
- •Experience running security and compliance programs at a 50–300 person company
- •Technical knowledge of SSO/IAM configuration, data flow through third-party tools, and log analysis
- •Hands-on operator mindset with ability to automate manual security tasks
- •Positive attitude towards AI as a tool for adoption and risk management
What You'll Do
- •Run the GRC program and automate it, including controls, policies, alerts, evidence, vendor reviews, SOC 2 Type 2 audits, annual risk assessments, and evaluating additional frameworks like ISO 27001 and HIPAA
- •Own how customer data moves through the stack, audit third-party tool data flows, and build processes for deletion requests
- •Be the security gate for new tools and vendors, confirm SOC 2 status, get DPAs signed, update subprocessor lists, and enable quick and safe adoption of new tools especially AI
- •Manage communication of trustworthiness via trust.close.com and security/privacy/GDPR pages
- •Coordinate product security audits including pen tests and vendor selection, ensuring necessary artifacts for customers and partners
- •Investigate and clean up security incidents, dig in and contain issues
- •Own identity and device security including SSO/IAM strategy, MDM, onboarding/offboarding security, and access reviews
- •Run employee security program including training, phishing simulations, and ongoing monitoring
Nice to Have
- •Experience with SOC 2 audits and compliance frameworks like ISO 27001 and HIPAA
- •Familiarity with tools like Vanta and Loki
- •Experience coordinating product security audits and pen tests
Benefits
- •Competitive pay plus organization-wide goal-based bonus
- •~5 weeks PTO to start plus 1-week Winter Holiday Break and paid US holidays
- •Earn 2 extra PTO days per year with the company
- •Option to work 80% time (4-day week) at 80% pay
- •Paid parental leave for primary and secondary caregivers
- •1-month paid sabbatical every 5 years
- •Healthcare plans covering 99% of premium plus Dental, Vision, HSA, FSA, and company-paid Long-Term Disability
- •401k with up to 6% match, vested immediately
About Close
A CRM for startups and small businesses with built-in sales communication tools.
San Francisco, CA
100-250
Sales & Marketing