What Relocity is Doing
Relocity is reimagining the global mobility experience. We enable enterprises to attract, retain, and engage talent globally. Powered by our AI-driven workforce mobility platform, we bring together local experts and insightful content in our native mobile app to deliver an excellent user experience for people on the move. Our core values drive us to focus on our customers, innovation, integrity, and excellence. Relocity serves hundreds of cities in more than 40 markets across the United States, Europe, and Asia. Learn more at www.relocity.com.
What You Will Do
Relocity is seeking an experienced Security & Compliance Manager to maintain and strengthen our information security, privacy, and data governance programs. Reporting into leadership, you will partner closely with Engineering, Product, Operations, and G&A to keep our systems, processes, and policies aligned with evolving regulatory and security requirements as the company grows.
Our compliance foundation is already established. You will own the ongoing maintenance of our SOC 2 Type II program, lead our ISO 27001 certification effort to completion, and continuously improve our governance and risk management practices. You will use Vanta as our compliance platform to streamline monitoring, evidence collection, and audit readiness.
How You Will Do It
Security & Compliance
- Maintain SOC 2 Type II compliance, including control operation, evidence collection, and annual audit readiness.
- Lead the ISO 27001 certification effort, from gap assessment through certification and ongoing surveillance.
- Own additional security and privacy frameworks, including GDPR, CCPA, and other applicable regulations.
- Serve as the company's primary advisor on security, privacy, and compliance strategy.
Risk & Governance
- Establish and continuously improve security controls, governance standards, policies, and risk management practices.
- Conduct security risk assessments, manage incident response, and drive remediation efforts.
- Administer Vanta and related tooling to automate compliance monitoring, continuous control testing, and audit workflows.
Cross-Functional Partnership
- Partner with Engineering, Product, Operations, Legal, and leadership to embed security and privacy into products, systems, and business processes.
- Translate technical risk into practical business recommendations that inform strategic decisions.
Data Protection & Awareness
- Define enterprise data governance standards, including data classification, retention, and lifecycle management.
- Lead company-wide security awareness initiatives that promote responsible data stewardship.
Continuous Improvement
- Monitor evolving regulations, emerging threats, and industry best practices to strengthen our security program.
- Evaluate and implement technologies and processes that improve automation, visibility, and operational efficiency.
What Will Enable Your Success
- Experience: Three to Five years in information security, data privacy, governance, compliance, or risk management.
- Compliance Leadership: Direct experience maintaining SOC 2 Type II and leading or supporting ISO 27001 certification within a SaaS or cloud-first environment.
- Compliance Automation: Hands-on experience with Vanta or comparable GRC platforms such as Drata, Secureframe, or Sprinto.
- Privacy Expertise: Strong working knowledge of GDPR, CCPA, and other applicable privacy regulations.
- Governance: Demonstrated success designing and implementing data classification, retention, privacy, and security programs.
- Technical Aptitude: Familiarity with cloud infrastructure, SaaS environments, identity and access management, and security controls.
- Communication: Ability to explain complex technical concepts to technical and non-technical audiences.
- Cross-Functional Leadership: Proven ability to influence stakeholders and lead initiatives across multiple functions.
- Education: Bachelor's degree in Information Security, Computer Science, Information Systems, Business, Legal Studies, or a related field, or equivalent practical experience.
Nice to Have
- Professional certifications such as CIPP/US, CIPM, CISSP, CISM, or CRISC.
- Experience in a high-growth SaaS or technology startup environment.
- Knowledge of privacy-by-design principles.
How We Support You and Work-Life Balance...
- Competitive Compensation
- Paid Time Off
- Paid Parental Leave
- Remote Workplace
- Flexible Work Schedules
- Health, Dental, Vision, and LTD Insurance
- 401(k)
- Professional Development Opportunities
Salary Range: $140,000 - $170,000 + bonus
Relocity is an Equal Opportunity Employer and does not discriminate against any applicant on the basis of race, color, religion/creed, national origin, gender, sex, marital status, age, disability, use of a guide dog or service animal, sexual orientation, military/veteran status, or any other status protected by federal, state, or local law. Relocity will only employ individuals who are legally authorized to work. Any offer of employment is conditioned upon the successful completion of a background investigation.
#LI-Remote
#LI-AC2
3–5 years in security, privacy, governance, compliance, or risk management; SOC 2 and ISO 27001 experience; Vanta or comparable GRC experience; privacy regulation knowledge; bachelor's degree or equivalent experience.
Key Responsibilities
- maintaining compliance
- managing risks
- leading initiatives
Skills & Tools
Vanta, Drata, Secureframe, Sprinto, SaaS, GDPR, CCPA, SOC 2 Type II, ISO 27001, GRC, cloud infrastructure, identity and access management
Job Details
- Category: Legal and Compliance
- Seniority: Mid Level
- Commitment: Full Time
- Workplace: Remote — United States
- Salary: USD 140,000 – 170,000 / year
- Languages: English
Benefits
- Generous paid time off
- Retirement plan
- Generous parental leave
About Relocity
A global mobility technology company helping enterprises attract, retain, and engage talent worldwide. — Industry: Information Technology