S

Information Security & GRC Manager

Scribe • United States
Remote
Apply Now
AI Summary

Lead Scribe’s security and compliance program, managing SOC 2 audits, customer security reviews, and risk remediation. Requires 6+ years in SaaS security, hands-on audit experience, and technical risk judgment. Owns internal controls, vendor security, and incident response.

Key Highlights
End-to-end SOC 2 Type II audit ownership with evidence collection and auditor management
Customer security reviews, trust center maintenance, and cross-functional collaboration (Sales, Legal, CS)
Technical risk assessment and remediation prioritization for engineering teams
Key Responsibilities
Run SOC 2 Type II audits end-to-end (controls, evidence, auditor management)
Oversee customer security questionnaires and trust center documentation
Provide technical input to Legal on security contract terms
Maintain risk registers, security policies, and vendor security reviews
Translate audit findings into engineering remediation tasks
Operate internal security programs (access reviews, training, vulnerability management)

Interested in remote work opportunities in Cyber Security? Discover Cyber Security Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

Technical Skills Required
SOC 2 compliance management Enterprise security risk assessment GRC automation platforms (e.g., Vanta, Drata)
Benefits & Perks
Equity in Scribe
Flexible PTO and parental leave
Comprehensive healthcare (including $0/month medical options)
$500/year Flex Benefit for home office/learning tools
Free Talkspace membership and One Medical access

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

Nice to Have
CISSP, CISM, or CISA certification
Experience with AI governance frameworks (e.g., EU AI Act)
Public-sector security compliance knowledge

Job Description

Scribe is seeking an Information Security & GRC Manager to own and scale its security and compliance program. The role involves running SOC 2 Type II audits end-to-end, handling enterprise security reviews, and driving remediation with engineering teams.

Key responsibilities include:

Want the full job description? Read the complete details on LinkedIn, the original posting.
Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.

Ready to apply?

Apply Now
See Jaabz jobs first on Google 1 tap · free · in AI Overviews Jaabz is on your Google Manage Preferred Sources
Job Overview
Posted Nov 01, 2026
Employment Full-time
Experience Mid-Senior level
Location United States
Category Cyber Security
Company Scribe
Keep exploring

Similar Jobs

Explore other opportunities that match your interests

Hidden company

Log in to see location

Premium

Senior Security Researcher – Exploit & Vulnerability Analysis (Technical Analysis Cell)

Cyber Security Full-time 1d ago

Log in free to see the details

Hidden company

Log in to see location

Premium

Senior Software Engineer, Security Data Platforms (Founding Team)

Cyber Security Full-time Mid-Senior level 2d ago

Log in free to see the details

Remote Work Guides

Practical guides for finding and thriving in remote roles.

Browse all articles

Subscribe to our newsletter

New visa sponsorship, relocation and remote tech jobs, delivered to your inbox.