Information Security & Compliance Manager (SOC 2 Type II & PCI DSS 4.x)

rocketparts • United State

Remote

Apply Now

AI Summary

Lead end-to-end SOC 2 Type II and PCI DSS 4.x compliance programs, ensuring audit readiness while supporting client engagements. Oversee security policies, risk assessments, incident response, and vendor compliance. Collaborate with engineering teams to implement practical security solutions in a fast-growing, remote-first agency environment.

Key Highlights

End-to-end ownership of SOC 2 Type II and PCI DSS 4.x compliance programs

Direct collaboration with engineering teams to ensure implementable security controls

Support for multiple client compliance programs with varying scopes and deadlines

Key Responsibilities

Drive SOC 2 Type II and PCI DSS 4.x readiness, including scoping, control design, evidence collection, and auditor coordination

Own the security and compliance program, including policies, access reviews, security-awareness training, vendor/risk reviews, and incident response

Maintain control-to-evidence mapping in compliance tooling (Vanta) and ensure consistency between policies and operational documentation

Support client engagements by assisting with their SOC 2 Type II and PCI DSS 4.x programs, aligning with their unique scopes, auditors, and deadlines

Collaborate with engineering teams to ensure security recommendations are implementable and practical

Interested in remote work opportunities in Cyber Security? Discover Cyber Security Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

Technical Skills Required

SOC 2 (Type II) Compliance PCI DSS 4.x Compliance Information Security & Governance (GRC)

Benefits & Perks

Fully remote work

Premium benefits (including 401K match)

Unlimited PTO

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

Nice to Have

Payments or fintech industry background

Familiarity with PCI DSS 4.x future-dated requirements (mandatory since March 2025)

Exposure to ISO 27001, HIPAA, GDPR, or NIST frameworks

Consulting or agency experience

CISSP, CISA, or CISM certifications

Job Description

RocketParts is a fast-growing software development agency founded by two experienced engineers who have built large-scale systems for companies like Riot Games, ScoreBig, and Universal Music Group.

Our mission is to empower businesses to tackle any software development challenge with purpose-fit solutions, professional expertise, realistic expectations, and results-driven outcomes.

We know firsthand the effort it takes to build great software. Our goal is to create a workplace where engineers can thrive, take pride in their work, grow, and be part of a high-performing team.

The Role

Want the full job description? Read the complete details on LinkedIn, the original posting.

Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.