Senior Compliance Manager

Location: San Francisco Bay Area, Peninsula. On-site, five days a week.
Type: Full time
Compensation: $180,000 to $290,000 base depending on level (Senior, Staff or Principal), plus equity. Relocation support provided.

Our client is a venture-backed voice AI company building AI agents that handle the sales, support and logistics calls enterprise contact centers once staffed with large human teams. Thousands of companies run on the platform, including Fortune 500 names in healthcare, travel and technology. Revenue has grown more than tenfold since the start of 2025 with a team of about 50, and the company was recently ranked the top place to work in the Bay Area by a major business publication.

Their 2026 goal is a full CX platform where AI workers act as frontline agents, QA analysts and managers, improving every customer interaction rather than waiting for a human to retune them.

The company is hiring its first Senior Compliance Manager to own the security and compliance program end to end. This role reports directly to the founder and works closely with Engineering and Sales. Compliance is what unlocks their enterprise and healthcare deals, so the work has a direct line to revenue.

An audit-ready compliance program that enterprise customers trust.

• Run SOC 2 Type II, HIPAA and ISO 27001 programs end to end, including auditors and the GRC platform
• Answer security questionnaires and RFPs quickly and keep the trust center current
• Own policies, vendor risk and training, and track new rules that affect voice AI
• Join enterprise sales calls to answer security and compliance questions

Must have:

• 4+ years in compliance, GRC or security audit
• Has personally owned at least one SOC 2 Type II audit
• Experience at a VC-backed SaaS or AI company, or at a Big 4 or audit firm doing SOC 2 or ISO work

Nice to have:

• CISA, CISM or CRISC certification
• Hands-on with Vanta or Drata
• HIPAA experience with healthcare customers

Less about checkboxes, more about:

• Precision in controls, evidence and documentation
• Clear answers to customer security teams
• Working with engineers without slowing them down
• Spotting risks before an auditor or customer does

They thrive if they would rather fix a gap early than explain it to an auditor, they can explain a control to both an engineer and a CISO, and they want to build a compliance program rather than maintain one.

Four rounds: a recruiter screen, a 45-minute SOC 2 audit walkthrough, a 45-minute hiring manager interview, and a two-hour onsite with a security questionnaire exercise, a customer call simulation, and a cross-functional conversation with Engineering and Legal.

This search is run by Riderflex on the company's behalf. Apply through this posting and the company name and full details are shared on the first call.

By applying for this position, you consent to receive future communications from Riderflex about open positions and other relevant updates. You may unsubscribe from these communications at any time.