About the Role
Title: Compliance Manager
Location: Remote
Type: Full-time
Workplace: remote
Category: Engineering
Job Description:
About Us
At TeamSnap, we believe when the world connects through sports; the world becomes better. TeamSnap is a sports and communication platform dedicated to taking the work out of play in youth sports. We also believe our jobs should excite us, our teammates should support us and our bosses should inspire us. We empower our people to bring big ideas and tiny egos, landing us on Outside Magazine’s list of “Best Places to Work” and Built In’s “100 Best Remote-First Places to Work.”
TeamSnap is seeking a Compliance Manager who will operate as the project manager for our security and compliance program. You will drive policy creation, coordinate cross-functional ownership through RACI alignment, and ensure continuous compliance with SOC 2 Type 2 and other frameworks. Success is measured by audit readiness, completion of recurring control activities, and clear visibility of compliance posture to leadership.
Key Responsibilities:
- Program Governance: Draft, publish, and maintain information-security and privacy policies, standards, and procedures. Establish a living compliance calendar covering control tests, access reviews, vendor assessments, and policy refresh cycles.
- Stakeholder Alignment & RACI Management: Facilitate working sessions so Engineering, IT, PeopleOps, and Legal understand their accountability for controls such as vulnerability management, change management, and incident response, etc. Track and report control ownership status; escalate gaps or overdue actions.
- Audit & Certification Ownership: Lead annual SOC 2 Type 2 audits end-to-end: scoping, readiness assessments, evidence collection, auditor coordination, and remediation follow-up. Maintain audit work-papers and a centralized evidence repository.
- Control Operation & MonitoringExecute and document periodic controls: quarterly user access reviews, privileged-access attestations, vendor risk assessments, business continuity tests, and vulnerability-remediation SLAs. Automate evidence capture wherever feasible through tooling integrations (e.g., Vanta, Jira, Slack).
- Risk Management & Continuous ImprovementConduct security risk assessments for new products and vendors; track mitigation plans to closure. Monitor regulatory and industry changes; update policies and training content accordingly. Generate KPIs and board-level metrics on compliance health, audit findings, and risk trends.
- Training & AwarenessDevelop and deliver role-based security and privacy training; ensure coverage and completion tracking. Promote a culture of accountability through regular communications, lunch-and-learns, and compliance office hours.
Minimum Qualifications:
- 5+ years in information-security compliance, ideally within a SaaS environment.
- Demonstrated ownership of at least one full SOC 2 Type 2 audit cycle.
- Strong project-management skills: ability to run parallel work-streams, influence without authority, and meet tight deadlines.
- Working knowledge of common control frameworks (SOC 2, ISO 27001, NIST CSF, etc..)
- Familiarity with security tooling for evidence collection (e.g., Vanta) and ticketing systems (Jira).
- Excellent written and verbal communication; adept at translating control requirements for technical and non-technical audiences.
Preferred Qualifications:
- CISSP, CISA, CISM, or similar certification.
- Experience building RACI matrices and running cross-functional governance forums.
- Background in vulnerability management processes or secure SDLC.