Senior Security Compliance Consultant (SOC 2 & GRC Specialist)
Toptal
Senior Security Compliance Consultant (SOC 2 & GRC Specialist) at Toptal is a full time role based in Remote · Worldwide (remote). It was published on 9 September 2026 and was open at last check.
| Role | Senior Security Compliance Consultant (SOC 2 & GRC Specialist) |
|---|---|
| Company | Toptal |
| Location | Remote · Worldwide (remote) |
| Employment type | Full Time |
| Published | 9 September 2026 |
| Status | Open at last check |
Headquarters:
Summary
We are seeking an elite, hands-on Senior Security Compliance Consultant (SOC 2 & GRC Specialist) to lead a critical, company-wide SOC 2 Type II audit readiness initiative. In this strategic engagement, you will perform comprehensive gap analyses, assess existing security controls, design robust compliance workflows, and drive cross-functional teams toward audit completion.
The ideal candidate brings a proven track record in GRC frameworks, control mapping, evidence automation, and policy development. Utilizing automated compliance platforms such as Sprinto, you will build repeatable compliance processes, validate technical controls, and ensure a seamless audit experience across the entire organization.
General Information (About the Client)
Our client is a fast-scaling, cloud-native technology platform committed to maintaining enterprise-grade trust, security, and data privacy. To support their rapid commercial growth and enterprise sales pipeline, they are establishing a formal, highly disciplined security governance model.
They operate a modern, cloud-first environment where compliance is treated not as a passive checklist, but as an active, automated operational advantage. By leveraging modern GRC platforms and fostering a security-conscious culture, they provide an empowering environment for compliance experts to drive real architectural and procedural improvements.
Tasks and Deliverables
SOC 2 Readiness & Gap Analysis: Conduct a thorough assessment of existing technical and operational security controls, pinpointing compliance gaps and building an actionable remediation roadmap.
Control Design & Implementation: Author, refine, and operationalize security controls, policies, and procedures aligned with SOC 2 Trust Services Criteria (TSC) and PCI DSS standards.
Automated Evidence Collection: Lead evidence-gathering workflows using automated GRC tooling (Sprinto), ensuring all technical artifacts, access logs, and policy attestations are validated and audit-ready.
PCI DSS Guidance: Provide expert advisory on maintaining PCI DSS alignment alongside SOC 2, ensuring overlapping control requirements are mapped efficiently to reduce operational drag.
Cross-Functional Coordination: Collaborate with engineering, DevOps, HR, and IT teams to embed compliance workflows into daily operations without slowing down feature execution.
Auditor Interface & Readiness: Serve as the primary liaison during the audit preparation phase, coordinating directly with external auditors to present evidence, resolve findings, and ensure a successful audit cycle.
Required Experience
SOC 2 Mastery: Proven track record of leading end-to-end SOC 2 readiness, gap remediation, and audit preparation initiatives for cloud-native or B2B SaaS companies.
GRC & PCI DSS Acumen: Deep familiarity with Governance, Risk, and Compliance (GRC) frameworks, risk assessment methodologies, and PCI DSS compliance requirements.
Tooling Proficiency (Sprinto): Direct, practical experience leveraging automated compliance and evidence-collection platforms, specifically Sprinto (or equivalent modern platforms like Vanta/Drata).
Policy & Control Mapping: Exceptional capability to author clear, enforceable security policies and translate abstract regulatory requirements into concrete engineering controls.
Cross-Functional Facilitation: Strong stakeholder management skills with a history of driving accountability across distributed engineering, product, and operations teams.
Create your free OnJob profile to apply — we'll take you to Toptal's application after sign-up. · Posted 9 Sept 2026.
Senior Security Compliance Consultant (SOC 2 & GRC Specialist) at Toptal — questions answered
What does the Senior Security Compliance Consultant (SOC 2 & GRC Specialist) role at Toptal pay?
Toptal does not publish a salary on this Senior Security Compliance Consultant (SOC 2 & GRC Specialist) listing, so OnJob shows no figure for it rather than an estimate. For what this role pays across the market, the OnJob salary guides aggregate the live listings that do disclose pay.
Is the Senior Security Compliance Consultant (SOC 2 & GRC Specialist) role at Toptal remote?
Yes — Toptal advertises this Senior Security Compliance Consultant (SOC 2 & GRC Specialist) role as remote, tied to Remote · Worldwide, and it is listed as full time work. Remote terms come from the employer's own posting, so confirm the expected working hours, timezone and any on-site days with Toptal before you apply.
Is the Senior Security Compliance Consultant (SOC 2 & GRC Specialist) role at Toptal still open?
The Senior Security Compliance Consultant (SOC 2 & GRC Specialist) posting at Toptal was open at OnJob's last check of the employer's careers page, having been published on 9 September 2026. OnJob re-checks source listings on each build and marks a role closed once it disappears, but listings can close without notice, so the employer's own page is the final word.
How do you apply for the Senior Security Compliance Consultant (SOC 2 & GRC Specialist) role at Toptal?
Apply to the Senior Security Compliance Consultant (SOC 2 & GRC Specialist) at Toptal role through OnJob with a free profile: OnJob scores your fit against the listing, shows the skills lowering that score, and submits an ATS-ready profile to Toptal's own application page. Creating a profile is free and needs no card.
Explore more on OnJob
Hiring for a role like this?
Post a job on OnJob and reach AI-matched candidates.
