
Security & Compliance Manager
Required skills
- SOC 2
- cloud infrastructure
- identity and access
- data handling
- security controls
- enterprise security reviews
- legal
- ownership
- writing
- judgment
Nice to have
- SOC 2 Type II
- ongoing compliance
Role summary
Wafer is seeking a Security & Compliance Manager to own their security and compliance program. This role involves managing SOC 2 audits, handling customer security questionnaires, maintaining security documentation, and partnering with engineering and legal to implement controls for access, logging, incident response, and business continuity. The manager will also oversee vendor security assessments and build efficient processes to ensure the company meets its commitments while moving quickly. This is a full-time, on-site position in San Francisco.
Wafer is the fastest inference cloud for open source models.
We're looking for someone to own our security and compliance program. You'll work closely with engineering, operations and legal to run audits, answer customer security questions and turn requirements into practical, reliable processes. You should be comfortable building the function while doing the work yourself.
What you'll do
Own the SOC 2 audit process, including evidence collection, auditor coordination, control reviews and remediation.
Lead customer security questionnaires and reviews, providing clear answers supported by current evidence.
Keep our trust center, policies, security documentation and approved responses accurate.
Partner with engineers to implement and document controls for access, devices, logging, incident response and business continuity.
Coordinate privacy and contractual requirements with legal and engineering, including data retention, deletion and subprocessors.
Manage vendor security assessments and track risks, owners and outstanding actions.
Build efficient processes that help the company move quickly while meeting its commitments.
What we look for
Experience personally owning SOC 2 Type II audits and ongoing compliance work.
Strong technical understanding of cloud infrastructure, identity and access, data handling and security controls.
Experience handling enterprise security reviews and working with engineering and legal teams.
A record of taking ownership, resolving difficult problems and following through.
Excellent writing and judgment. You can explain complex systems clearly and distinguish what is implemented from what is planned.
You'll have substantial ownership and work directly with the people building Wafer.
How we work
Full-time, on-site in San Francisco.
Similar roles
Member of StaffWafer · San Francisco, CA · Onsite
Head of TalentWafer · San Francisco, CA · Onsite
Engineering Program Manager, Security Compliance, Apple Services EngineeringApple · Seattle, WA · Onsite
Principal Product Manager - Tech, Security Compliance and EngineeringAmazon · Austin, TX · Onsite- Security Compliance AnalystHarbinger Motors Inc. · Garden Grove, CA · Onsite
- Director of Research Security ComplianceAuburn University · Auburn University, AL · Onsite
