Compliance Lead (part-time, contractor)
Job description
Own and build Soda's compliance function, running the SOC 2 Type II and SOC 3 programme and pushing automation of compliance processes. Part-time, remote contractor role for a B2B SaaS company.
At a glance
- Employment
- Part-time · Independent contractor
- Work mode
- Remote · EU time zone
- Languages
- English – fluent
What you'll do
- Push the automation of our compliance program as far as it can go
- Adapt our compliance posture to the fast pace of AI-driven change with pragmatic solutions
- Make RFP and security-questionnaire answering hyper efficient using and expanding existing tooling
- Own the annual SOC 2 Type II and SOC 3 cycle with our external auditor: planning, access, samples, our part of the report, and closing out findings
- Keep the control set audit-ready all year: watch what's lapsing, chase what's failing, make sure nothing falls through the cracks
- Run people compliance: compliance steps in onboarding and offboarding, plus yearly security training, code of conduct, incident-reporting and phishing cycles
- Be Sales' compliance partner in enterprise security reviews, unblocking deals without promising things we don't do
What we're looking for
- 3+ years in security compliance / GRC, ideally at a B2B SaaS company
- You have run a SOC 2 Type II cycle hands-on, including working directly with an external auditor through scoping, sampling and remediation
- Hands-on with a compliance automation platform: Drata ideally, or Vanta / Secureframe
- Comfortable designing and implementing automations, including with AI
- Comfortable with the systems these controls run against: AWS, Okta, GitHub, endpoint management
- Comfortable answering enterprise security questionnaires and holding your own live in a customer security review
- Clear written and spoken English, and the judgement to write a policy people can actually follow
- Available roughly 2–3 days per week, with solid working-hours overlap with CET
- Must be working in an EU time zone
- Able to invoice as a freelancer / contractor
Nice to have
- Technical experience
- Experience in a company under 200 people, where compliance is one person plus a lot of automation
- ISO 27001 experience
- A certification such as CISA, CISM, CIPP/E or ISO 27001 Lead Implementer
Benefits
A real mandate to build a modern, forward-looking compliance system that keeps pace with and leverages opportunities created by the new AI reality
A documented starting point: runbooks for every manual control, a scheduling system that tells you what's due, and a full written handover from your predecessor
- A live, certified programme with enterprise customers depending on it, with full freedom to implement improvements
- An AI-forward company that will actually fund and use what you build
- Direct access to decision-makers; no layers between you and the people who can fix things
- A competitive contractor rate
Apply
About Soda Data
Soda is pioneering data quality and observability, allowing teams to discover, prioritize, and collaboratively resolve data issues. We are an international team, headquartered in Brussels, Belgium and dispersed globally. Our customers are enterprises (banks, insurers, retailers and utilities).
Mission
Bring everyone closer to their data
Key facts
- Brussels, Belgium
- data quality and observability
- Running a SOC 2 cycle since 2021
- International team, dispersed globally
- Customers are enterprises (banks, insurers, retailers and utilities)