Group Security & Compliance Manager – Remote

About the role

Sparkrock is seeking a senior security and compliance leader to own the customer‑trust function across its private‑equity portfolio. This fully remote position will design and run SOC 2 Type II programs, manage a customer‑facing trust portal, and lead AI compliance initiatives for multiple portfolio companies.

Key responsibilities

• Lead customer security reviews, RFPs, RFIs and questionnaires to keep enterprise deals moving.
• Stand up and maintain a trust portal (e.g., SafeBase, Vanta, Drata) with a dedicated AI/ML section.
• Own SOC 2 Type II audit management across portfolio companies, coordinating evidence and auditor relationships.
• Author and maintain security policies, DPAs, sub‑processor lists and incident‑communication templates.
• Manage AI compliance, including questionnaire responses, sub‑processor oversight, and framework tracking (EU AI Act, ISO 42001, NIST AI RMF).
• Conduct third‑party vendor security reviews and renewals.
• Develop and deliver internal security awareness training and onboard customers.
• Draft and coordinate customer‑facing incident communications with legal and engineering teams.

Required profile

• 6+ years of experience in security GRC, customer trust or SaaS compliance.
• Excellent spoken and written English; polished and credible in live calls with enterprise customers.
• Primary point‑of‑contact experience on SOC 2 audits (Type II preferred).
• Strong understanding of cloud security concepts.

Required skills

• SOC 2 Type II audit management
• Trust‑portal platforms such as SafeBase, Vanta or Drata
• AI compliance frameworks: EU AI Act, ISO 42001, NIST AI RMF
• Cloud security fundamentals

What we offer

• Fully remote work with a global, high‑performing team.
• Opportunity to shape security and compliance programs across multiple companies.
• Competitive salary of $60,000 USD per year.