Security Compliance Manager – Remote (US)

About the role

As the Security Compliance Lead you will own Sardine’s security compliance and GRC function end‑to‑end, reducing risk through effective communication, partnership and program ownership while keeping the company audit‑ and customer‑ready.

Key responsibilities

• Own compliance planning and program across SOC 2 Type II, PCI DSS Level 1, ISO 27001, GDPR, CCPA and DORA.
• Drive FedRAMP authorization, coordinating NIST SP 800‑53 control implementation and continuous monitoring.
• Serve as primary interface with auditors, regulators and industry stakeholders, presenting outcomes to senior management.
• Maintain and rationalize the control framework, risk register and customer assurance program.
• Lead and develop the Security Compliance team, mentoring analysts and scaling the function.

Required profile

• 7+ years in security compliance, GRC or audit with end‑to‑end ownership of SOC 2, PCI DSS or ISO 27001 programs.
• Deep knowledge of security and privacy frameworks (PCI DSS, SOC 2, ISO 27001, GDPR/CCPA, DORA) and familiarity with NIST CSF and CIS controls.
• Experience in fast‑paced fintech or payments environments, preferably as a PCI DSS Level 1 service provider.
• Proven ability to communicate with executives, auditors and regulators.
• Readiness to lead, mentor and grow a compliance team.

Required skills

• SOC 2
• PCI DSS
• ISO 27001
• GDPR
• CCPA
• DORA
• FedRAMP
• NIST SP 800‑53
• Vanta or similar GRC automation tools
• macOS environment

What we offer

• Generous cash and equity compensation with early‑exercise options.
• Remote‑first culture – work from anywhere in the US.
• Flexible paid time off and year‑end break.
• Health, dental and vision coverage for employees and dependents.
• 401k matching, MacBook Pro, home‑office stipend and monthly meal stipend.