Group Security & Compliance Manager

About the role

As the Group Security & Compliance Manager at Sparkrock, you will own the customer‑trust and compliance function across a growing private‑equity portfolio. You will lead security reviews for enterprise deals, build the trust portal from scratch, and shape AI compliance before standards are fully established.

Key responsibilities

• Lead customer security reviews, RFPs, RFIs and questionnaires to keep deals moving.
• Stand up and maintain a customer‑facing trust portal (e.g., SafeBase, Vanta, Drata) with a dedicated AI/ML section.
• Own SOC 2 Type II program management across portfolio companies, coordinate evidence, and manage auditor relationships.
• Author and maintain security policies, DPAs, sub‑processor lists and incident‑communication templates.
• Manage AI compliance, including questionnaire responses, sub‑processor oversight, framework tracking (EU AI Act, ISO 42001, NIST AI RMF), use disclosures and incident playbooks.
• Conduct third‑party vendor security reviews and renewals.
• Develop and deliver internal security awareness training and onboard customers on security setup.
• Draft and coordinate customer‑facing incident communications with legal and engineering teams.

Required profile

• 6+ years of experience in security GRC, customer trust or SaaS compliance.
• Excellent spoken and written English; polished and credible in live calls with enterprise customers.
• Primary point of contact for SOC 2 audits (Type II preferred).
• Working understanding of cloud security.

Required skills

• SOC 2 Type II audit management
• Trust‑portal platforms (SafeBase, Vanta, Drata)
• AI compliance frameworks (EU AI Act, ISO 42001, NIST AI RMF)
• Cloud security concepts

What we offer

• Fully remote work environment
• Opportunity to shape security programs across multiple companies
• Competitive salary of $60,000 USD per year