The opportunity
Anyscale's security and compliance needs are growing as we work with larger and more demanding customers. Compliance is increasingly a customer-facing, contractual function rather than an internal exercise, and we are looking for someone to own it.
What you'll do
Own our SOC 2 Type II and ISO 27001 programs, and future frameworks as we: take them on, including scope, evidence, control operation, and the relationship with our external auditors.
Own and complete the control evidence base in our compliance automation: platform, moving controls from partially substantiated to audit-ready and keeping them there.
Lead security diligence for enterprise and regulated customers: security questionnaires, audit responses, right-to-audit requests, and the recurring reporting these customers require.
Own the risk register and mature risk management from a security-team: activity into a recorded, enterprise-aligned program.
Coordinate the compliance obligations that come with customer contracts,: including data protection, breach-notification timelines, and vendor and subprocessor assessments, in partnership with legal.
Assess and stand up new certifications as the customer pipeline requires them.
What they're looking for
- Partner with engineering and IT to make evidence collection a byproduct of: how systems already run, rather than a manual scramble before each audit.
