Compliance Manager
About The Position
Procare Solutions is seeking a Compliance Manager to lead and enhance its compliance program. This role is crucial for managing the SOC 2 Type 2 audit program across five products and providing support for SOX, privacy, PCI, HIPAA, and other regulatory frameworks. The position requires a hands-on individual adept at developing repeatable processes, collaborating with engineering and IT teams, and translating complex requirements into actionable controls. The Compliance Manager will lead a small team, offering an opportunity for people leadership while remaining involved in the technical and operational aspects of compliance.
Requirements
- 4+ years of experience in compliance, information security, or IT audit.
- Direct experience running or supporting SOC 2 Type 2 audits.
- Working knowledge of SOX ITGC concepts, privacy frameworks (GDPR/CCPA), and PCI DSS requirements.
- Experience reviewing contract terms.
- Familiarity with common control frameworks (e.g., HIPAA, AICPA Trust Services Criteria, NIST CSF, ISO 27001).
- Prior experience managing or mentoring junior team members or contractors.
- Strong written and verbal communication skills.
- Comfortable working in a fast-paced SaaS environment.
- Bachelor's degree in a related field, or equivalent practical experience.
- Experience supporting multiple concurrent audit cycles in a SaaS or cloud environment.
- Experience with cloud infrastructure (AWS, GCP, or Azure) and understanding of how technical controls map to compliance requirements.
Nice To Haves
- Experience working with GRC platforms (e.g., Vanta, Drata, OneTrust, ServiceNow GRC).
- Relevant certifications: CISA, CISM, CIPP/E, CIPP/US, or similar.
Responsibilities
- Own the end-to-end SOC 2 Type 2 audit lifecycle, including scoping, control design, evidence collection, auditor liaison, remediation tracking, and continuous monitoring.
- Support SOX compliance by assisting with IT general controls (ITGC) testing, walkthroughs, and coordination with internal and external auditors.
- Assist with privacy compliance efforts (e.g., GDPR, CCPA/CPRA), including audit preparation, control validation, and documentation of data handling practices.
- Support PCI DSS assessments, including scoping, control validation, and coordination with relevant teams.
- Review, negotiate, and track Data Processing Addendums (DPAs) with customers, vendors, and subprocessors.
- Assess subprocessors and vendors for their compliance posture and contractual data protection requirements.
- Partner with Engineering, IT, and Security teams to design, implement, and monitor controls, maintaining a control library and evidence trail.
- Maintain and update compliance policies, procedures, and control narratives, ensuring training materials are current.
- Serve as a primary contact for external auditors, customer security questionnaires, and due diligence requests.
- Identify opportunities to automate evidence collection and streamline control monitoring using GRC tooling.
Benefits
- Medical, dental, & vision plans
- HSA option with employer contributions
- Vacation time, holidays, sick days, volunteer & personal days
- 401K Plan with employer match and immediate vesting
- Employee Stock Purchase Plan
- Employee Discount Program
- Medical, Dependent Care, and Transportation FSA Plans
- Company paid Short and Long-Term disability and Life Insurance
- RTD EcoPass for all Denver employees
- Tuition Reimbursement and continued Professional Development
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Manager
