[Hiring] Compliance Lead @Soda Data

Role Description

We're looking for someone to own Soda's compliance function and keep building it. We've already built a strong foundation: we've been running a SOC 2 cycle since 2021, and have been making strides in automating and professionalizing the entire compliance process in the past year. You will be pushing this further:

• Maximizing automation and streamlining processes to improve compliance.
• Finding pragmatic ways to maintain compliance commitments without slowing down operations.

If your instinct when you see a manual process is to ask what should be doing this instead of a person, this is a good role for you.

What you'll do:

• Build the structure: Make compliance at Soda easier and more reliable to run.
• Push the automation of our compliance program as far as it can go.
• Adapt our compliance posture to keep up with the fast pace of change in AI.
• Make RFP and security-questionnaire answering hyper-efficient.
• Make it run: Ensure the program stays audit-ready while improving it.
• Own the annual SOC 2 Type II and SOC 3 cycle with our external auditor.
• Keep the control set audit-ready all year.
• Run people compliance: onboarding, offboarding, yearly security training, and incident-reporting.
• Be Sales' compliance partner in enterprise security reviews.

Qualifications

• 3+ years in security compliance / GRC, ideally at a B2B SaaS company.
• Experience running a SOC 2 Type II cycle hands-on.
• Hands-on with a compliance automation platform: Drata, Vanta, or Secureframe.
• Comfortable designing and implementing automations, including with AI.
• Familiar with systems like AWS, Okta, GitHub, and endpoint management.
• Clear written and spoken English.
• Available roughly 2–3 days per week, with solid working-hours overlap with CET.
• Must be working in an EU time zone.
• Able to invoice as a freelancer / contractor.

Requirements

• Comfortable answering enterprise security questionnaires.
• Ability to manage busy engineers and ensure timely compliance tasks.
• Ability to build scripts, integrations, prompts, and AI-assisted workflows.
• Self-directed and predictable in managing your own agenda.

Benefits

• Technical experience.
• Experience in a company under 200 people.
• ISO 27001 experience.
• A certification such as CISA, CISM, CIPP/E, or ISO 27001 Lead Implementer.
• A real mandate to build a modern, forward-looking compliance system.
• A live, certified programme with enterprise customers depending on it.
• A documented starting point: runbooks for every manual control.
• An AI-forward company that will fund and use what you build.
• Direct access to decision-makers.
• A competitive contractor rate.