Compliance Lead

Description:

FintransicAI builds enterprise AI for document intelligence and workflow automation, serving banks, mortgage lenders and other regulated enterprises. Our team spans Seattle, Islamabad and Munich, and we're preparing for our first SOC 2 report.

You'll own our SOC 2 program from scoping through audit: working directly with engineering leadership, setting up our compliance platform (Vanta or similar), closing control gaps, and managing our external CPA auditor.

What you'll do:

• Define SOC 2 scope and drive us to a Type I report, then through a Type II observation window
• Run a gap assessment and lead remediation with engineering and IT
• Create policies and run recurring controls: access reviews, change management, vendor risk, security training, incident response drills
• Configure and manage our compliance platform and integrations (AWS, GitHub, HR and ticketing tools)
• Coordinate pen testing, act as the main contact for auditors, and support customer security questionnaires

What we're looking for:

• 3+ years in GRC, security compliance or information security
• Hands-on experience taking a company through a SOC 2 audit, ideally Type II
• Experience with Vanta, Drata, Secureframe or a similar platform
• Working knowledge of AWS security, access control and SDLC/change management
• Strong written English; able to explain controls to engineers and executives
• Comfortable working independently across time zones