vanta jobs in San Diego

Halcyon seeks a Senior Information Security Specialist to strengthen enterprise security posture through third-party risk assessment, compliance coordination, policy development, and incident response preparedness. The role involves managing vendor remediation, supporting security testing and vulnerability management, developing corrective action plans, and ensuring implementation of security controls across cloud and hybrid environments.…See more You will coordinate with MSPs, engineering, and operations teams while staying current with frameworks like SOC 2, ISO 27001, FedRAMP, and NIST 800-53. Experience in GRC, IT risk management, and regulatory compliance is required, with incident response and disaster recovery expertise valued.

Own day-to-day compliance operations for a healthcare AI company, managing frameworks (SOC2 Type II, HIPAA, NIST, ISO), controls, and policies; triage and remediate failing compliance tests; administer Google Workspace and MDM for workforce security; coordinate external audits end to end; and track risk via assessments and remediation planning. This is a hands-on role requiring direct ownership of remediation from detection to closure, not ticket routing—you'll operate with high rigor in a fast-scaling startup while partnering across engineering, product, and leadership.See more

This role combines compliance operations, infrastructure project management, and IT governance. The Compliance Analyst will own SOC 1/SOC 2 and privacy audit readiness, administer compliance platforms (Vanta), manage internal controls and IT security policies, oversee infrastructure change control and business system deployments, and coordinate cross-functional projects to maintain audit-ready posture and support enterprise sales through trust enablement.See more

Own end-to-end compliance operations for a healthcare AI company, including managing compliance frameworks (SOC2 Type II, HIPAA, NIST, ISO), driving control remediation to closure, administering Google Workspace and MDM, coordinating external audits, and maintaining audit-readiness. This role requires hands-on management of a compliance platform of record, continuous monitoring of compliance tests, security policy maintenance, evidence collection, and risk tracking—operating with high rigor in a fast-scaling startup without routing issues to others.See more

This role owns the day-to-day operation of a compliance program end to end, managing compliance frameworks (SOC2 Type II, HIPAA, NIST, ISO), continuously monitoring and remediating control failures, and administering workforce security systems (Google Workspace and MDM). The manager will coordinate external audits, maintain policies and evidence collection, track risks, and drive remediation from detection to closure without heavy delegation.…See more The role requires hands-on experience with compliance automation platforms and direct IT administration of identity and access management systems.

Own end-to-end compliance operations for a healthcare AI company, including managing compliance platforms (SOC2 Type II, HIPAA, NIST, ISO), administering Google Workspace and MDM, driving remediation of failing controls to closure, and coordinating external audits. Monitor compliance tests continuously, maintain security policies and evidence collection, and work cross-functionally with engineering and leadership to keep the company audit-ready at scale.…See more The role requires hands-on compliance platform administration (Vanta, Drata, or similar), not purely administrative ticket routing.

As Compliance Analyst, Trust & Infrastructure at BrainCorp, you will own the company's GRC operations—driving SOC 1/SOC 2 and privacy audits, managing continuous control monitoring, and administering compliance platforms like Vanta. You will serve as the primary project coordinator bridging commercial teams, corporate services, and technical execution, overseeing infrastructure change control, IT General Controls, and the cross-functional delivery of business system initiatives.…See more Your responsibilities include authoring security and privacy policies, maintaining compliance vendor inventories, coordinating user acceptance testing, and translating complex technical workflows into audit-ready evidence and executive communication.