Compliance Manager

About the Company

10a Labs is the safety and threat-intelligence layer trusted by frontier AI labs, AI unicorns, Fortune 10 companies, and leading global technology platforms. Our adversarial red teaming, model evaluations, and intelligence collection enable engineering, safety, and security teams to stay ahead of evolving threats and deploy AI systems safely.

Responsibilities

• Own the company's compliance program across SOC 2, GDPR, ISO 27001, Cyber Essentials Plus, and additional security, privacy, and governance frameworks
• Lead all phases of external audits, certifications, and annual compliance assessments
• Develop, maintain, and continuously improve security policies, standards, procedures, and internal controls
• Partner with engineering and security teams to implement, document, and validate technical, administrative, and operational controls
• Manage evidence collection, audit readiness, and ongoing compliance activities using GRC platforms
• Coordinate enterprise risk assessments and track remediation efforts
• Own third-party risk management, including vendor security reviews and due diligence
• Respond to customer security questionnaires and support enterprise procurement processes
• Build and maintain customer-facing compliance resources, including trust portals and security documentation
• Monitor changes to global privacy and security regulations
• Help develop and operationalize AI governance practices aligned with emerging regulations like the EU AI Act and NIST AI Risk Management Framework
• Develop compliance metrics, dashboards, and executive reporting
• Deliver security awareness and compliance training

Requirements

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, IT, Business, Risk Management, or Law
• 5+ years of experience in compliance, information security, governance, risk management, or audit
• Experience owning or managing SOC 2 compliance programs and external audits
• Strong understanding of GDPR and modern data privacy requirements
• Experience implementing security controls aligned with ISO 27001, NIST CSF, CIS Controls, or HIPAA
• Experience working with cloud environments such as AWS or GCP
• Experience using GRC platforms such as Vanta, Drata, or Secureframe
• Strong project management and communication skills

Preferred Qualifications

• Experience leading multiple successful SOC 2 Type II audits
• Familiarity with AI systems, AI governance, or AI security concepts
• Experience supporting compliance programs within high-growth technology or SaaS companies
• Professional certifications such as CISA, CISM, CRISC, CISSP, or CIPP