Ethos
AI voice screen included
About this opportunity
Ethos is growing fast, and our clients, including leading AI labs and investment firms, increasingly expect independent proof that we protect their data. We need an experienced compliance lead to own our SOC 2 and ISO 27001 programme and take us from early setup to certification as quickly as is realistic. Vanta is already in place.
You won't be doing it alone. Engineering will make the technical changes, and leadership and operations will own their parts. Your job is to set the plan, drive it forward and make sure the right people deliver. Great looks like a clear plan within your first two weeks, a team that always knows what's next and why, and a smooth audit.
What you'll do:
- Own SOC 2 and ISO 27001 from start to finish: set the plan, keep it moving and hold us to it
- Work with leadership, engineering and operations, setting out what's needed and why
- Take on specialist work yourself where it makes sense, such as drafting policies or running the risk assessment
- Get us audit ready and guide us through the audits
Compensation: £500–800 per day
Commitment: 2–3 days per week. Fixed-term until certification, with the possibility of extending
Location: Remote. Being able to work from our London office is a strong plus
Start date: ASAP
Key requirements
- Led at least one SOC 2 audit and one ISO 27001 certification from start to finish
- Hands-on Vanta experience
- Enough technical depth to direct engineers and judge whether a fix meets a control, across cloud (ideally AWS), access management, logging and CI/CD
- A pragmatic, self-directed way of working that suits a fast-moving startup