Job Description
Interface.ai is seeking a Senior Compliance Specialist to lead and manage compliance and risk initiatives across its cloud-native infrastructure. The successful candidate will play a crucial role in developing and strengthening internal controls, ensuring regulatory compliance, and leading third-party audits involving various frameworks, including SOC 2, ISO 27001, and PCI DSS. The role requires a deep understanding of AWS cloud environments to support secure and compliant operations at scale.
Responsibilities include:
- Leading and managing compliance external audits including SOC 2, ISO 27001, and PCI DSS
- Leading the Vendor risk assessment and due diligence programs with respect to Vendor onboarding
- Participating in risk assessments, gap analysis, and internal control reviews
- Overseeing and maintaining the Infrastructure Vulnerability Management program and external penetration tests
- Mapping and correlating different compliance frameworks and standards
- Drafting, maintaining, and enforcing security and compliance policies
- Ensuring regulatory compliance with U.S. federal financial regulations
- Managing the compliance management platform and document period evidence required for various external audits
- Working cross-functionally with Engineering, DevOps, Product, and Legal teams
- Conducting Security Awareness campaigns and periodic phishing campaigns as required
- Skill in using prompt engineering techniques to enhance productivity, drive efficiency, and decision-making with generative AI tools.
Requirements:
- 6–8 years of experience in compliance, information security, or risk management roles within SaaS or cloud-native environments
- Deep understanding in AWS architecture and services
- Proven experience implementing and managing controls aligned with SOC 2, PCI DSS v4.0, and NIST 800-53
- Strong experience in developing ITGCs and auditing technical controls in the cloud
- Working knowledge or certification in ISO/IEC 27001 & ISO 27002
- Demonstrated success managing compliance audits end-to-end
- Strong documentation, communication, and stakeholder coordination skills
- Experience working in Startups
Interface.ai offers:
- An inclusive and welcoming environment
- A culture that values and respects each person's unique perspective and contributions