drata jobs in San Diego

Halcyon seeks a Senior Information Security Specialist to strengthen enterprise security posture through third-party risk assessment, compliance coordination, policy development, and incident response preparedness. The role involves managing vendor remediation, supporting security testing and vulnerability management, developing corrective action plans, and ensuring implementation of security controls across cloud and hybrid environments.…See more You will coordinate with MSPs, engineering, and operations teams while staying current with frameworks like SOC 2, ISO 27001, FedRAMP, and NIST 800-53. Experience in GRC, IT risk management, and regulatory compliance is required, with incident response and disaster recovery expertise valued.

Own day-to-day compliance operations for a healthcare AI company, managing frameworks (SOC2 Type II, HIPAA, NIST, ISO), controls, and policies; triage and remediate failing compliance tests; administer Google Workspace and MDM for workforce security; coordinate external audits end to end; and track risk via assessments and remediation planning. This is a hands-on role requiring direct ownership of remediation from detection to closure, not ticket routing—you'll operate with high rigor in a fast-scaling startup while partnering across engineering, product, and leadership.See more

Own end-to-end compliance operations for a healthcare AI company, including managing compliance frameworks (SOC2 Type II, HIPAA, NIST, ISO), driving control remediation to closure, administering Google Workspace and MDM, coordinating external audits, and maintaining audit-readiness. This role requires hands-on management of a compliance platform of record, continuous monitoring of compliance tests, security policy maintenance, evidence collection, and risk tracking—operating with high rigor in a fast-scaling startup without routing issues to others.See more

This role owns the day-to-day operation of a compliance program end to end, managing compliance frameworks (SOC2 Type II, HIPAA, NIST, ISO), continuously monitoring and remediating control failures, and administering workforce security systems (Google Workspace and MDM). The manager will coordinate external audits, maintain policies and evidence collection, track risks, and drive remediation from detection to closure without heavy delegation.…See more The role requires hands-on experience with compliance automation platforms and direct IT administration of identity and access management systems.

Own end-to-end compliance operations for a healthcare AI company, including managing compliance platforms (SOC2 Type II, HIPAA, NIST, ISO), administering Google Workspace and MDM, driving remediation of failing controls to closure, and coordinating external audits. Monitor compliance tests continuously, maintain security policies and evidence collection, and work cross-functionally with engineering and leadership to keep the company audit-ready at scale.…See more The role requires hands-on compliance platform administration (Vanta, Drata, or similar), not purely administrative ticket routing.