Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Compliance Lead (part-time, contractor) role.

Rezi rewrites your resume against Soda Data's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Compliance Lead (part-time, contractor) posting at Soda Data — free, in seconds.

About the Role

Soda is seeking an individual to own and advance its compliance function. This role involves maximizing automation and streamlining processes to enhance compliance efficiency while minimizing manual effort from engineering and operations teams. The ideal candidate will find pragmatic solutions to maintain compliance commitments without hindering the company's rapid product and operations evolution, particularly in the context of AI integration.

Responsibilities

Push the automation of Soda's compliance program, leveraging the existing compliance automation platform.
Adapt compliance posture to keep pace with AI advancements in product and internal operations.
Streamline RFP and security-questionnaire answering processes using and expanding existing tooling.
Own the annual SOC 2 Type II and SOC 3 cycle, including planning, access, samples, reporting, and findings remediation.
Maintain audit-readiness of the control set throughout the year, monitoring and addressing lapses.
Manage people compliance processes, including onboarding/offboarding, annual security training, code of conduct, incident reporting, and phishing cycles.
Act as a compliance partner for Sales in enterprise security reviews to facilitate deal closure.

Requirements

Experience running a SOC 2 program or similar at a SaaS company.
Ability to manage and motivate busy engineers to complete compliance tasks with minimal friction.
Capability to build scripts, integrations, prompts, and AI-assisted workflows.
Predictable and self-directed work ethic with the ability to manage one's own agenda.
Ability to flag issues requiring decisions from management early.
3+ years in security compliance / GRC, ideally at a B2B SaaS company.
Hands-on experience running a SOC 2 Type II cycle, including direct work with external auditors.
Proficiency with compliance automation platforms (Drata, Vanta, or Secureframe).
Comfort designing and implementing automations, including with AI.
Familiarity with systems like AWS, Okta, GitHub, and endpoint management for evidence validation.
Experience answering enterprise security questionnaires and participating in customer security reviews.
Clear written and spoken English.
Ability to write policies that are practical and followable.
Available roughly 2–3 days per week.
Solid working-hours overlap with CET.
Must be working in an EU time zone.
Able to invoice as a freelancer / contractor.

Skills

Compliance automation
AI-assisted workflows
Scripting
Integrations
Prompt engineering
SOC 2 Type II
SOC 3
GRC
Security questionnaires
Customer security reviews
Policy writing

Location

Remote
EU time zone

Work Type

Part-time
Contractor

Experience Level

3+ years in security compliance / GRC
Experience in a company under 200 people (Nice to have)

Education Level

CISA certification (Nice to have)
CISM certification (Nice to have)
CIPP/E certification (Nice to have)
ISO 27001 Lead Implementer certification (Nice to have)

Benefits

Competitive contractor rate (Nice to have)

About the Company

Soda is pioneering the data quality and observability category, enabling teams to discover, prioritize, and resolve data issues.
The company's platform helps users understand and trust their data, leading to reliable data products and analytics.
Soda is an international team headquartered in Brussels, Belgium, with a global presence.
The company serves enterprise clients in sectors like banking, insurance, retail, and utilities, prioritizing security compliance.
Soda is an AI-forward company that will fund and utilize new technologies.