Data Security Compliance Director
About The Position
The Data Security Compliance Director owns Syllo’s data security compliance function and reports to the Head of Legal, Security, and Compliance. The role ensures that company processes and policies support certifications and meet auditor and client expectations. It manages SOC 2 and ISO 27001 certification renewals, internal policies for handling sensitive information, client-facing security information and vendor security questionnaire responses, software security and configuration acceptance standards, security issue response coordination, and privacy-compliant data handling. The role will develop policies and procedures, sometimes from scratch, while taking over a program that is in progress rather than a mature function. The director will execute directly while building and scaling the team over time. The position also offers opportunities to grow into product-related security responsibilities and team building as Syllo matures. It requires end-to-end ownership of compliance programs and sound judgment across legal, technical, and commercial considerations.
Requirements
- At least 5 years in a Director-level position or equivalent, overseeing overall security compliance for an organization or owning security compliance for an organization’s commercial function.
- Direct ownership of SOC 2 and ISO 27001 compliance programs.
- Demonstrated experience managing high-volume vendor security questionnaire processes across enterprise sales pipelines.
- Experience designing data handling policies, disaster recovery documentation, and incident response procedures that withstand auditor and customer scrutiny.
- Understanding of how privacy regimes affect data storage and inquiry response, and ability to translate requirements into processes with an engineering team.
- Ability to exercise cross-functional judgment, including knowing when to escalate compliance issues and when to resolve them at the working level.
- Technical fluency in the security infrastructure underlying compliance programs; hands-on engineering experience is not required.
- Bachelor’s degree required.
Nice To Haves
- Experience building compliance programs at high-growth B2B SaaS companies.
- CISSP, CISM, or equivalent certification.
- Advanced degree.
Responsibilities
- Manage SOC 2 Type II and ISO 27001 certification cycles end to end, including scope, evidence, auditor relationships, and remediation.
- Ensure Syllo’s processes and policies support its certifications.
- Own vendor security questionnaire responses across the enterprise sales pipeline, maintaining quality and turnaround time.
- Design and maintain data handling policies, disaster recovery plans, and incident response procedures.
- Define security and configuration standards software must meet before entering Syllo’s technology stack, and approve additions against those standards.
- Drive the response to security issues according to the incident response plan by coordinating the appropriate owners rather than conducting technical investigations.
- Ensure data storage and inquiry-response processes comply with applicable privacy regimes, working cross-functionally with engineering on implementation.
- Advise operations and commercial teams as the compliance representative.
- Execute the compliance program directly while building and scaling the team over time.
Benefits
- Medical, dental, vision, and voluntary insurance options.
- Vacation, sick leave, and paid holidays.
- Access to benefit counselors.
- Fitness class reimbursements.
- Competitive base salary and equity options.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Director
