Quality & Compliance Specialist

Cirrascale Cloud Services•Austin, TX

39d•$60,000 - $72,000

About The Position

Cirrascale is seeking a detail-oriented and proactive Quality and Compliance Specialist to support the company's security and compliance programs. This role will have a primary focus on managing Vanta, maintaining compliance readiness, coordinating SOC 2 activities, tracking security and compliance requirements, and ensuring identified gaps are addressed in a timely manner. The Compliance Specialist will work closely with Operations, Engineering, Data Center, and leadership teams to maintain compliance requirements and support the company's security posture. The ideal candidate is highly organized, comfortable working across teams, and able to identify outstanding compliance requirements, follow up with owners, and drive items through completion.

Requirements

Position is open to candidates with experience as quality engineers, quality auditors, quality technicians, and quality inspectors.
Preference given to candidates with ASQ certifications including CQE, CQA, CQT or CQI.
The development, performance, and support of internal audits, particularly system audits of policies, procedures, and work instructions (as relevant to ISO 9001, SOC 2 or similar standards)
Ability to follow up to completion on audit findings, gathering objective evidence of compliance with specified requirements.
Basic understanding of quality principles and goals related to providing products and services which meet customer specifications/needs.
Strong organizational and project management skills.
Ability to manage multiple deadlines and follow up with multiple stakeholders.
Strong attention to detail and ability to identify missing or inconsistent information.
Strong written and verbal communication skills.
Ability to work independently and take ownership of assigned compliance activities.
Comfortable working with both technical and non-technical teams.

Nice To Haves

Relevant certifications such as Security+, CISA or similar.
2–4 years of experience in compliance, information security, risk management, audit, or a related field.
Working knowledge of SOC 2 and general information security controls.
Experience supporting a SOC 2 Type II environment.
Experience managing Vanta or a similar compliance platform.
Experience working with data center, cloud infrastructure, or technology companies.
Familiarity with manufacturing/service standards and security frameworks such as ISO 9001, ISO 27001, CSF, or CIS Benchmarks.
Working in a high-level security environment such as banking and governmental entities.
Experience with security awareness and compliance training programs.
Experience with customer audit and security questionnaires.

Responsibilities

Own the day-to-day administration and management of Vanta.
Monitor Vanta dashboards, controls, policies, integrations to proactively identify missing, expired or incomplete items necessary to ensure system readiness and compliance requirements are maintained at the highest possible level.
Collect and maintain evidence and follow up with employees, managers, and technical teams on outstanding compliance requirements.
Maintain accurate compliance records, evidence, and documentation within Vanta and all relevant areas of the Cirrascale Business Management System.
Coordinate required employee security and compliance training and track completion.
Support the company's Business Management system to ensure compliance and audit readiness to SOC 2 Type II and all relevant standards of ISO, CMMC, and FedRAMP certification programs.
Coordinate evidence collection and ensure requested documentation is complete and available.
Track Business Management controls, testing requirements, exceptions, and remediation items.
Work with internal teams to identify and address compliance gaps before audits.
Coordinate with external auditors and provide requested documentation and evidence in partnership with leadership.
Maintain organized records of audit activities, findings, and remediation efforts.
Partners with Operations, IT, Engineering, and Data Center teams to monitor process compliance and technical security requirements.
Help ensure data center security controls, access requirements, documentation, and procedures remain current and aligned with company and customer requirements.
Track security-related action items and follow up with responsible teams to ensure timely completion.
Assist in identifying potential compliance or security gaps and escalate issues appropriately.
Support ongoing reviews of access controls, security policies, employee requirements, and other compliance-related controls.
Maintain compliance policies, procedures, and supporting documentation.
Track policy acknowledgments and required employee compliance activities.
Assist with security awareness and compliance training initiatives.
Ensure compliance documentation remains accurate, current, and accessible for audits and internal review.
Serve as a central point of contact for day-to-day compliance questions and requests.
Coordinate compliance-related tasks across multiple departments.
Maintain compliance calendars, deadlines, and action-item tracking.
Provide regular updates to leadership regarding compliance status, outstanding items, and areas requiring attention.
Assist with customer security questionnaires and compliance requests as needed.
Support additional security, compliance, and operational initiatives as assigned.