{"id":3988561,"url":"https://alion.io/job/coval-compliance-manager","title":"Compliance Manager","company":{"id":47880,"name":"Coval","domain":"coval.ai","url":"https://alion.io/company/coval","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Work at a Startup","truth_index":null},"role":"Management","role_family":"Management","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":100000,"max":150000,"currency":"USD","period":"year","gross":null,"usd_annual":150000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"GCP","optional":false},{"name":"HIPAA","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"EU AI Act","optional":true},{"name":"NIST AI RMF","optional":true}],"status":"live","first_seen_at":"2026-11-09T22:31:44Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-13T15:37:58Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"About Coval\nCoval is the evaluation platform for enterprise voice AI, built by former Waymo engineers applying autonomous vehicle testing standards to help companies deploy and scale conversational agents to 10s of millions of calls a month. The platform gives engineering, product, QA, and operations teams the infrastructure to stress-test agents across millions of realistic scenarios before launch, monitor every live conversation in production, and continuously sharpen performance through human-in-the-loop review. Trusted by more than 60 customers like Chime and Zoom, Coval is the operations layer for voice interfaces.\nThe role\nWe're looking for a Compliance Manager to own security and compliance at Coval end to end. Our customers are enterprises in healthcare, fintech, and insurance, so trust is part of the product: every deal runs through a security review, and every new framework we hold opens another set of doors. We already hold SOC 2 and HIPAA, and PCI DSS and ISO 27001 are in process. You will own all of them, plus the audits and the procurement questionnaires and security reviews that come with enterprise sales.\nYou'll be the person who keeps the whole program moving. Our compliance platform surfaces a steady stream of alerts and findings, and today they land on engineers who should be doing deeper security and product work. You'll take that load: triage every flag, fix the ones you can handle yourself, and hand the rest to the right engineer with clear context so it gets done. You'll be technical enough to make real changes and to know when something needs an engineer, and organized enough to run several audits and a steady flow of customer requests without anything slipping.\nWhat you'll do\nOwn our compliance frameworks\nOwn the SOC 2 and HIPAA programs day to day, and drive PCI DSS and ISO 27001 from in-process to certified.\nKeep policies, procedures, and the risk register accurate to how we actually operate, and make sure the controls our platform maps across frameworks are actually implemented and evidenced.\nTake on new frameworks as customer demand grows (for example ISO 42001 or other AI-specific standards), with a clear view of which ones are worth the investment. \nRun audits to successful outcomes\nManage auditors, assessors, and the audit calendar for every framework: scoping, readiness, fieldwork, and remediation.\nKeep the program audit-ready year round instead of scrambling at fieldwork, with controls tested continuously and gaps tracked to closure. \nManage our compliance platform and the alerts it raises\nOwn our compliance platform (Oneleet) and triage every alert and failing control, deciding what's urgent, what's noise, and what needs a change.\nFix what you can directly: access and identity settings, device and policy gaps, vendor and HR items, documentation, and straightforward cloud or configuration changes.\nFor anything that needs deeper engineering or security work, write a clear Linear ticket with the control, the risk, and the evidence needed, route it to the right engineer, and follow it to closure.\nCollect and organize audit evidence, and automate the repetitive pieces, such as access reviews and vendor reviews, with the platform and simple scripts where it makes sense. \nOwn security reviews and procurement questionnaires\nOwn the intake and turnaround of customer security questionnaires, security reviews, and vendor risk assessments, working with Sales so they don't stall deals.\nMaintain our compliance knowledge base and answer library so responses are accurate, consistent, and quick, and pull in engineers only for questions that truly need them.\nJoin customer security calls when a prospect's team wants to go deeper, and feed recurring customer asks back into which controls, frameworks, and documents we prioritize next. \nWork across the company\nPartner with Engineering, Product, People, and Legal to implement controls that are minimally disruptive and sustainable as we scale, and manage the vendor risk process for the tools we use.\nWhat you'll need\n4+ years in compliance, GRC, security operations, or IT, including ownership of a third-party audit cycle end to end for at least one of SOC 2, ISO 27001, HIPAA, or PCI DSS.\nTechnical comfort: you can work in a cloud console (AWS or GCP), identity and device management tools, and ticketing systems, and you can read scripts or write simple ones. You don't need to be a software engineer, but you need to be able to tell a quick fix from one that needs an engineer.\nExperience running a compliance automation platform (Oneleet, Vanta, Drata, or similar) and working through its findings.\nExperience answering enterprise security questionnaires and supporting security reviews for a B2B SaaS company.\nStrong project management: you can run several audits and a steady flow of customer requests at once, keep engineers moving on remediation, and follow things through to closure.\nYou communicate clearly with engineers, executives, auditors, and customers, and can explain a technical or compliance concept to a non-technical reader.\nStrong attention to detail, and good judgment about risk: you know which gaps matter and which ones are noise.\nComfort with ambiguity at an early-stage company where the role isn't fully defined yet, because part of the job is defining it.\nNice to have\nExperience with PCI DSS or ISO 27001 certification specifically.\nAn engineering, DevOps, or security background, or experience in a hands-on security operations role.\nExperience with AI-specific frameworks such as ISO 42001, NIST AI RMF, or the EU AI Act.\nExperience in healthcare, fintech, or other regulated industries.\nExperience at an early-stage startup, ideally as the first compliance hire.\nRelevant certifications (CISSP, CISA, CISM, ISO 27001 Lead Implementer or Lead Auditor).\nCompensation & details\nSalary: $100k-$150K + equity\nLocation: San Francisco office, 5 days a week\nBenefits\nHealthcare, Dental, & Vision coverage\n401K\nPet friendly-office\nFree gym membership\nFree lunch and dinner when working in the office\nUnlimited PTO","description_format":"text","description_chars":6076,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Equity","Gym membership","Pet friendly","Unlimited PTO"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Conversational AI","AI Evaluation & Observability"],"lifecycle":[{"event":"open","at":"2026-11-09T22:31:44Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-11-12T07:36:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":26,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-11-12T10:38:37Z"},"pay":{"stated_usd_annual":150000,"is_top_pay":true},"html_url":"https://alion.io/job/coval-compliance-manager","json_url":"https://alion.io/job/coval-compliance-manager.json","meta":{"generated_at":"2026-11-13T17:14:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":34478,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":47880},"rest":"https://alion.io/mcp/rest/get_company?id=47880"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcoval-compliance-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcoval-compliance-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcoval-compliance-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/coval-compliance-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcoval-compliance-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3988561}},{"tool":"search_jobs","arguments":{"company":"coval.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3988561},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}