Compliance Engineering Lead
Socket, United States
The role
We are hiring a Compliance Engineering Lead to own compliance as an engineered system rather than a calendar of reminders.
Socket sells to security teams. Our customers ask harder questions than most buyers ask, and they are right to. That means our SOC 2 Type II, our path to ISO 27001, our risk and vendor programs, and the assurance artifacts we put in front of enterprise buyers all have to be genuinely well run, not merely present. The credibility of what we sell depends on it.
This is a foundational role, and it is deliberately an engineering role. The person we want does not manage compliance by chasing people for screenshots. They write code against APIs, build control tests that run on a schedule and fail loudly, and treat evidence collection as a pipeline with an owner and an SLA. You will own the compliance platform decision, including whether the platform we use today is the right one. If your answer is that we should build more of it ourselves, make that case.