Compliance Manager

The role

The Compliance Manager will own the company's compliance function end to end, including audits, evidence base, risk register, and customer security diligence. This person will work with the Head of Security and across engineering, IT, legal, and sales to manage SOC 2 Type II and ISO 27001 programs.

What you will do

• Own SOC 2 Type II and ISO 27001 programs, including scope, evidence, control operation, and external auditor relationships.
• Complete the control evidence base in the compliance automation platform.
• Lead security diligence for enterprise and regulated customers through questionnaires, audit responses, and right-to-audit requests.
• Own the risk register and mature risk management into an enterprise-aligned program.
• Coordinate compliance obligations from customer contracts, including data protection and vendor assessments.
• Assess and stand up new certifications as required by the customer pipeline.
• Partner with engineering and IT to automate evidence collection.

Required qualifications

• 7+ years in governance, risk, and compliance, ideally including time at a high-growth startup.
• Demonstrated ownership of SOC 2 and ISO 27001 programs, including running audits end to end with external auditors.
• Experience fronting security diligence for enterprise or regulated customers.
• Working fluency with compliance automation platforms (such as Vanta or equivalent).
• A strong grasp of security controls and how they operate in a cloud and SaaS environment.
• The judgment and communication to run a program independently and coordinate across functions.

Nice to have

• Experience with regulated-customer contractual security obligations: data protection agreements, breach notification, and right-to-audit provisions.
• Exposure to newer or higher-bar frameworks (for example FedRAMP).
• Experience building a compliance function or team.
• Familiarity with cloud infrastructure or AI or ML platforms.

Benefits

• Competitive salary and equity
• Health/dental/vision coverage (many plans up to 99% employer-covered)
• Flexible time off
• Paid parental leave
• Mental health support

About the company

Anyscale is on a mission to democratize distributed computing and make it accessible to software developers. They are commercializing Ray, a popular open-source project for scalable machine learning.