Security and Compliance Manager

About nOps

nOps is the leading FinOps platform for AWS, Azure, and GCP, helping engineering and finance teams gain real-time cloud cost visibility and achieve autonomous optimization. Our mission is to make cloud cost management effortless, enabling teams to scale innovation without waste. We partner closely with the major hyperscalers and our customers to continuously improve how organizations optimize, manage, and invest in their cloud environments.

The Role

We are looking for a Security and Compliance Manager to take ownership of security and compliance at nOps. You will step into our current programs, keep them running without a gap, and then improve or rebuild any process you think should be stronger. You will also take on core IT administration and act as a confident voice for our security posture with enterprise customers.

What You'll Do

Security and Compliance

• Take ownership of our existing security and compliance programs, and update or rebuild any process you believe can be stronger.

• Own our SOC 2 program end to end, from evidence collection to working with auditors, and keep us continuously audit-ready.

• Maintain compliance with GDPR and CCPA, and confirm our policies are followed in practice.

• Design and maintain role-based access control (RBAC) across our applications and cloud environments, so every person has the access their role requires and no more.

• Manage penetration testing and vulnerability monitoring, and track remediation with engineering.

• Build and run security awareness and compliance training, with clear tracking and sign-off.

• Partner with Sales on customer security reviews and questionnaires, and join customer calls to present our security posture.

• Meet cloud marketplace security requirements as we expand our listings.

• Keep security documentation and architecture diagrams current, working closely with HR, Finance, and Engineering.

IT Administration

• Administer core IT systems, including identity, single sign-on, and user access to company tools.

• Own IT onboarding and offboarding with HR: set up access by role, remove it promptly, and keep user records and distribution lists accurate.

Compliance Frameworks and Regulations

• SOC 2 (required)

• GDPR (required)

• CCPA (required)

• Cloud marketplace security requirements for AWS, Azure, and GCP (helpful)

What You'll Bring

• Hands-on experience owning compliance programs, including leading a SOC 2 audit from preparation through completion.

• Strong knowledge of GDPR and CCPA and how to put them into practice.

• Experience designing and implementing RBAC and identity and access management, including single sign-on and directory services.

• Working knowledge of cloud security, ideally on AWS, Azure, and GCP, and experience coordinating penetration testing and vulnerability management.

• Comfort with day-to-day IT administration, such as user accounts and access requests.

• Excellent communication skills. You can explain security and compliance clearly to engineers, executives, and non-technical colleagues, and speak with confidence to enterprise customers.

• Rigorous about documentation and evidence.

• A security certification such as CISSP, CCEP, or an AWS certification is a plus.

• Located in the United States or Canada.

• Comfortable working remote-first with a growing team, and willing to build and improve processes.

Why nOps

• Join a fast-growing company at the center of innovation in the FinOps space.

• Own security and compliance and build the program the way you think it should be run.

• Competitive compensation and opportunity to grow professionally.

• Remote-friendly team with a strong culture of ownership, collaboration, and continuous learning.