Wafer logo
Wafer Verified
Digital Health, Healthtech, Software Development, Mobile Applications

Security & Compliance Manager

San Francisco, CAOnsiteFull TimeManager / HeadPosted 3 days ago

Is this role right for you?

Upload your resume and get a skill-by-skill breakdown — see exactly where you match, where you're close, and what to highlight. Not a mystery percentage.

Get a tailored resume highlighting what this role needs.

Required skills

  • SOC 2
  • cloud infrastructure
  • identity and access
  • data handling
  • security controls
  • enterprise security reviews
  • legal
  • ownership
  • writing
  • judgment

Nice to have

  • SOC 2 Type II
  • ongoing compliance

Role summary

Wafer is seeking a Security & Compliance Manager to own their security and compliance program. This role involves managing SOC 2 audits, handling customer security questionnaires, maintaining security documentation, and partnering with engineering and legal to implement controls for access, logging, incident response, and business continuity. The manager will also oversee vendor security assessments and build efficient processes to ensure the company meets its commitments while moving quickly. This is a full-time, on-site position in San Francisco.

Wafer is the fastest inference cloud for open source models.

We're looking for someone to own our security and compliance program. You'll work closely with engineering, operations and legal to run audits, answer customer security questions and turn requirements into practical, reliable processes. You should be comfortable building the function while doing the work yourself.

What you'll do

  • Own the SOC 2 audit process, including evidence collection, auditor coordination, control reviews and remediation.

  • Lead customer security questionnaires and reviews, providing clear answers supported by current evidence.

  • Keep our trust center, policies, security documentation and approved responses accurate.

  • Partner with engineers to implement and document controls for access, devices, logging, incident response and business continuity.

  • Coordinate privacy and contractual requirements with legal and engineering, including data retention, deletion and subprocessors.

  • Manage vendor security assessments and track risks, owners and outstanding actions.

  • Build efficient processes that help the company move quickly while meeting its commitments.

What we look for

  • Experience personally owning SOC 2 Type II audits and ongoing compliance work.

  • Strong technical understanding of cloud infrastructure, identity and access, data handling and security controls.

  • Experience handling enterprise security reviews and working with engineering and legal teams.

  • A record of taking ownership, resolving difficult problems and following through.

  • Excellent writing and judgment. You can explain complex systems clearly and distinguish what is implemented from what is planned.

You'll have substantial ownership and work directly with the people building Wafer.

How we work

Full-time, on-site in San Francisco.

Ready to apply?
You'll be redirected to Wafer's application page.

Similar roles

See how RiseMe works

Match, tailor, and prep so you send fewer applications and land more interviews.