Senior Security & Compliance Specialist

Ridgeline•Reno, NV

1d•$115,000 - $135,000•Hybrid

About The Position

Are you passionate about building privacy, security, and compliance programs that scale with innovation? Do you thrive in collaborative environments where your expertise helps shape the foundation of a growing technology platform? Are you energized by solving complex challenges and supporting cross-functional teams on their journey toward privacy, security, and regulatory alignment? If so, we invite you to be a part of our innovative team. Ridgeline is looking for a Senior Security and Compliance Specialist to support our expanding platform and growing team. In this role, you’ll work alongside leaders in Security, Engineering, Legal, and People to thoughtfully develop and maintain the controls, procedures, and governance frameworks that safeguard our platform and data. You’ll help translate compliance objectives into practical, scalable processes—contributing to the company’s ability to meet evolving regulatory expectations. You’ll also support training and awareness programs, while using modern tools—including AI technologies like ChatGPT—to improve documentation, workflows, and operational resilience. At Ridgeline, how we work matters as much as what we build. Ridgeliners act like owners, choose growth over comfort, and communicate with transparency. We assume positive intent, bias toward action, and bring solutions—not just problems. We celebrate wins, learn from setbacks, and thrive in a resilient, collaborative, high-performing culture. If this excites you, we’d love to meet you. You must be work authorized in the United States without the need for employer sponsorship.

Requirements

Bachelor’s degree in Management Information Systems, Accounting, Computer Science, or equivalent practical experience
4+ years in risk and controls, audit, project management, or information security compliance
Familiarity with key regulatory standards (e.g., SOC 1, SOC 2, ISO27001, ISO27018, CCPA, GDPR)
Experience implementing privacy and security controls aligned to frameworks such as GDPR
Understanding of security and compliance frameworks including CSA CCM, NIST, CoBIT, and Trust Service Criteria
Awareness of responsible AI practices, privacy regulations, and ethical use of technology
Strong organizational and prioritization skills across multiple initiatives
Ability to effectively collaborate and communicate across all levels of an organization
Commitment to continuous learning and adaptability in a dynamic environment
Serious interest in having fun at work

Nice To Haves

AWS Certified Cloud Practitioner (CCP)
Certified Information Systems Auditor (CISA)
Certified Information Privacy Professional (CIPP/E, CIPP/US, or CIPP/CA)
Experience with the ISO 42001 framework
Exposure to public cloud governance or Responsible AI compliance

Responsibilities

Collaborate with cross-functional teams to embed privacy and security principles early in project design and planning
Establish and maintain scalable policies, controls, and procedures to support compliance with domestic and international data protection regulations
Support internal teams in understanding audit requirements and outcomes, and help prioritize meaningful remediation steps
Contribute to the development and delivery of privacy, security, and compliance training for Ridgeline employees
Draft and update internal security policies, technical documentation, and control narratives
Monitor evolving regulations and assess their impact on Ridgeline’s privacy and compliance programs
Manage and continuously improve auditing and monitoring processes to align with industry standards
Evaluate third-party and internal tools for regulatory compliance and security posture
Support program management across compliance-related initiatives in partnership with Security TPMs
Promote a culture of accountability, empathy, and shared learning across the company