We're an early-stage AI startup working in financial services, and we are finishing up our SOC 2 readiness. We need someone experienced to get us through the upcoming audit and then stay on as a security and privacy advisor as we grow.
Please note: At this time we are looking for an individual contributor, not an agency or distributed model. We will need you to complete a standard background check and NDA.
Scope
• Close out our remaining SOC 2 gaps: policies, control evidence, and working with the auditor through report issuance (we already have an auditor).
• Help us answer customer security questionnaires without derailing the team
• Advise on privacy basics: data handling, retention, DPAs, and what we actually need at our size
• Be available for ad hoc questions from engineering on access controls, architecture, and tooling choices
You should have
• Hands-on experience taking at least one company through SOC 2 Type II
• Experience advising companies in regulated industries
If interested, please send a note about your relevant experience, availability, and rate