Group Security & Compliance Manager (Remote)

About the role

We are looking for a security and compliance leader to own the customer‑trust function across our private‑equity portfolio. The Group Security & Compliance Manager will drive SOC 2 Type II audits, build a customer‑facing trust portal and lead AI compliance for multiple portfolio companies, all in a fully remote environment.

Key responsibilities

• Lead customer security reviews, RFPs, RFIs and questionnaire responses to keep enterprise deals moving.
• Design, launch and maintain a public trust portal (SafeBase, Vanta, Drata or equivalent) with a dedicated AI/ML section.
• Own SOC 2 Type II program management across portfolio companies, coordinate evidence, and manage auditor relationships.
• Author and maintain security policies, DPAs, sub‑processor lists and incident‑communication templates.
• Develop and operate AI compliance processes, including questionnaire responses, sub‑processor management and framework tracking (EU AI Act, ISO 42001, NIST AI RMF).
• Conduct third‑party vendor security reviews and renewals.
• Create and deliver internal security awareness training and onboard customers on security setup.
• Draft and coordinate customer‑facing incident communications with legal and engineering teams.

Required profile

• 6+ years of experience in security GRC, customer trust or SaaS compliance.
• Excellent spoken and written English; able to represent the group in live calls with enterprise customers.
• Hands‑on experience as primary point of contact for SOC 2 Type II audits (Type II preferred).
• Working knowledge of cloud security concepts.

Required skills

• SOC 2 Type II audit management
• Trust‑portal platforms (SafeBase, Vanta, Drata)
• AI compliance frameworks (EU AI Act, ISO 42001, NIST AI RMF)
• Cloud security

What we offer

• Fully remote work with a global, high‑performing team.
• Opportunity to shape security and AI trust programs from the ground up.
• Competitive salary of $60,000 USD per year.