(470) 443-4800Get a demo
All roles

Security

Security Compliance Lead

Full-time or contractRemoteReports to: Product Security Manager

Lead SOC 2, then ISO 27001 and ISO/IEC 42001, and answer client security questions with evidence.

Apply

About SpareBrains

SpareBrains helps small and medium-sized businesses run better. A team of people and AI agents does real work for them. It finds where they’re losing customers online, fixes it, and keeps it running week after week. Our agents work inside our clients’ own accounts and tools, always with the owner’s approval. That makes trust the heart of what we sell.

The role

Owners trust us with their accounts, and larger clients will ask us to prove it. You’ll lead our compliance work, starting with SOC 2. You’ll keep one set of controls mapped across every framework, and collect evidence as we go, not in a rush before audits.

What you’ll do

Certifications

  • Run SOC 2 Type II end to end, with the auditor and our compliance tools.
  • Prepare for ISO 27001 and ISO/IEC 42001 when clients require them.
  • Keep one control list mapped across all frameworks.

Trust

  • Keep our public security page current.
  • Answer client security questionnaires.
  • Own policies, vendor risk, access reviews and training.

AI governance

  • Keep an inventory of our AI systems and agents, aligned with the NIST AI risk framework.
  • Build an evidence trail from agent action logs, eval results, tool limits and owner approvals.

What you’ll bring

  • 4+ years in security compliance or audit.
  • You have owned a SOC 2 Type II audit yourself.
  • You can read code and infrastructure code well enough to check a control.
  • Hands-on use of compliance automation tools.

You don’t need every item on this list. If the work excites you, apply anyway.

Nice to have

  • CISA, CISM or CRISC.
  • ISO/IEC 42001 lead auditor training.
  • Using AI every day in compliance work.

What we offer

A competitive base salary, equity, and the chance to build SpareBrains from its first day.

How to apply

Send your name, your email and your resume, with links to your work if you like. No cover letter needed.

Apply

Interview process

  1. Intro call. 30 minutes with our founder on the role, your work and your questions.
  2. Role interview. A deeper conversation about how you’d do the job, and the work you’ve done.
  3. Working session. We work through a real problem together, with any tools you like, AI included.
  4. References and offer. We speak to people you’ve worked with, then send the offer in writing.