{"id":2570978,"url":"https://alion.io/job/rocketparts-information-security-compliance-manager-grc","title":"Information Security & Compliance Manager (GRC)","company":{"id":4432548,"name":"RocketParts","domain":"rocketparts.io","url":"https://alion.io/company/rocketparts","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_payroll_markers","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":120000,"max":180000,"currency":"USD","period":"year","gross":null,"usd_annual":180000},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"GCP","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"GDPR","optional":true},{"name":"HIPAA","optional":true},{"name":"ISO 27001","optional":true}],"status":"live","first_seen_at":"2026-10-14T22:51:54Z","employer_posted_date":null,"last_verified_at":"2026-10-14T22:51:54Z","board_verified":false,"closed_at":null,"days_open":4,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":4},"description":"RocketParts is a fast-growing software development agency founded by two experienced engineers who have built large-scale systems for companies like Riot Games, ScoreBig, and Universal Music Group.\nOur mission is to empower businesses to tackle any software development challenge with purpose-fit solutions, professional expertise, realistic expectations, and results-driven outcomes.\nWe know firsthand the effort it takes to build great software. Our goal is to create a workplace where engineers can thrive, take pride in their work, grow, and be part of a high-performing team.\nThe Role\nWe are hiring an Information Security & Compliance Manager to lead SOC 2 Type II and PCI DSS 4.x compliance and own the security and compliance program end-to-end, keeping it audit-ready. The role runs in two directions. Internally, you own the program: policies and guidelines, access reviews, security-awareness training, vendor and risk reviews, the control-to-evidence mapping in Vanta, incident response, and the security questions that arrive from customers and prospects. Externally, you carry the same work into client engagements, supporting the companies we build software for through their own SOC 2 and PCI DSS programs - each with its own scope, auditor and deadlines. Throughout, you work alongside the engineers actually building these systems, which means your recommendations have to be implementable, not just defensible on paper.\nWhat You'll Do\nDrive SOC 2 Type II and PCI DSS 4.x readiness and continuous compliance - scoping, control design, evidence, auditor coordination, and remediation\n\nOwn the security and compliance program: policies and guidelines, access reviews, security-awareness training, vendor and risk reviews\n\nMaintain the control-to-evidence mapping in the compliance tooling (Vanta) and keep policies and operational docs consistent\n\nCoordinate incident response and field security questions from customers and prospects\n\nSupport client engagements through their own SOC 2 Type II and PCI DSS 4.x programs - each with its own scope, auditor and deadlines - working alongside the engineering teams actually building those systems, so remediation is implementable rather than theoretical\n\nWhat You Bring\n4+ years in information security, GRC, or IT compliance, with hands-on SOC 2 (ideally Type II) and PCI DSS experience\n\nWorking knowledge of common frameworks and cloud environments (GCP/AWS)\n\nClear writing - audit-ready documentation and the ability to explain requirements to engineers and non-technical stakeholders\n\nU.S.-based. Certifications (CISSP, CISA, CISM) are a plus\n\nNice to Have\nPayments or fintech background - most of what we build touches money movement\n\nFamiliarity with PCI DSS 4.x future-dated requirements, which became mandatory in March 2025\n\nExposure to ISO 27001, HIPAA, GDPR or NIST\n\nConsulting or agency experience - you will be in front of clients and running more than one program at a time\n\nHow We Work\nFully remote, across 14 jurisdictions and five continents\n\nSmall senior teams. This is a startup environment rather than a large enterprise one\n\nAI use is mandatory for our engineers, and we expect the same pragmatism from everyone else\n\nDirect communication, high autonomy, low process overhead\n\nWhy Is This Great For Me?\nFully remote\n\nFull premium benefits\n\n401K match\n\nUnlimited PTO\n\nYour role and responsibilities will expand as the company grows\n\nWork remotely with the flexibility to set your own schedule and take vacations\n\nWe respect work-life balance and don't require more than 40 hours per week unless you choose to\n\nCollaborate with driven and motivated colleagues\n\nEnjoy an open-minded culture that values opinions and feedback\n\nMinimal meetings, maximizing your productivity\n\nRocketParts asks respectfully to only apply through the application form and not email/apply to them directly. Recruiters and Agencies please do not RocketParts contact directly.","description_format":"text","description_chars":3932,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Unlimited PTO"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-10-14T22:55:56Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":4,"expected_fill_days":28,"reasons":["seen:4","win:early"],"computed_at":"2026-10-19T05:45:15Z"},"pay":{"stated_usd_annual":180000,"is_top_pay":true},"html_url":"https://alion.io/job/rocketparts-information-security-compliance-manager-grc","json_url":"https://alion.io/job/rocketparts-information-security-compliance-manager-grc.json","meta":{"generated_at":"2026-10-19T08:21:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5527,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4432548},"rest":"https://alion.io/mcp/rest/get_company?id=4432548"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frocketparts-information-security-compliance-manager-grc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frocketparts-information-security-compliance-manager-grc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frocketparts-information-security-compliance-manager-grc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rocketparts-information-security-compliance-manager-grc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frocketparts-information-security-compliance-manager-grc"}]}