Loading...
Mid LevelFull-timeRustGitGo
Salary Range
$72,250 - $97,750 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
Middesk is seeking a Governance, Risk & Compliance professional to own and scale our security, privacy, and compliance programs. This role will act as a liaison between engineering, legal, security, operations, and go-to-market teams, ensuring compliance without slowing business operations.
Key Responsibilities
- →Own Middesk’s trust and compliance platform, including continuous monitoring and control maintenance.
- →Manage compliance with frameworks such as SOC 2, ISO 27001, and external penetration tests.
- →Coordinate with internal teams and external auditors to support audits and assessments.
- →Maintain an inventory of subprocessors and vendors, focusing on access to customer data and PII.
- →Partner with Legal, Ops, and Engineering to assess vendor risk and ensure controls are in place.
- →Respond to due diligence questionnaires and trust-related inquiries from customers and partners.
- →Chair Middesk’s internal oversight or security committee.
- →Own the lifecycle of security and compliance policies.
- →Act as a translator between technical and non-technical teams.
- →Be the internal point of contact for external IT vendors.
Requirements
- ✓Experience owning or contributing to SOC 2 and/or ISO 27001 programs at a SaaS or data-driven company.
- ✓Hands-on experience with compliance automation tools such as Vanta, Drata, or Delve.
- ✓Strong understanding of data protection concepts, vendor risk, and security controls.
- ✓Ability to manage multiple stakeholders, deadlines, and ambiguous requirements.
- ✓Clear written and verbal communication skills, particularly with auditors, customers, and internal leadership.
- ✓Familiarity with privacy frameworks such as GDPR and CCPA.
Free to sign up. Takes 30 seconds.
