SOC 2 Compliance Expert / vCISO

Project-Based | Ukraine (Remote / Hybrid)

About the Role

We’re looking for a hands-on SOC 2 Compliance Expert / vCISO to take full ownership of our SOC 2 Type 1 audit and drive it to completion.

This is not a consulting or advisory role. We need a closer — someone who executes, fixes gaps, works directly in the tools, and leads us to a signed SOC 2 report.

The Situation

We’ve been working on SOC 2 for ~6 months and are close, but progress has stalled. The foundation is there — what’s missing is focused execution and ownership to push through the final stretch.

Scope of Work

Gap Remediation

• Review our current SOC 2 progress in [Vanta / Drata / Manual — specify]
• Clearly identify remaining gaps and blockers

Evidence Collection

• Personally collect, prepare, and upload required evidence
  (screenshots, logs, configs, access reviews, etc.)
• We will provide all required system access

Policy Management

• Finalize, polish, and align all required security policies:
  • Information Security
  • Incident Response
  • Disaster Recovery / BCP
  • Access Control, etc.

Auditor Liaison

• Act as the primary point of contact with the auditing firm
• Handle auditor questions, clarifications, and follow-ups end to end

Technical Coordination

• Translate compliance gaps into clear, actionable tickets
• Work with our dev team on any remaining technical fixes

Who We’re Looking For

• Proven experience successfully closing SOC 2 audits (Type 1 required, Type 2 a plus) for SaaS companies
• Strong technical background:
  • AWS or GCP
  • CI/CD pipelines
  • Access control & IAM
• Highly execution-focused and autonomous
• Comfortable owning the process without constant oversight

Engagement Details

• Project-based / sprint-focused
• Immediate start preferred
• Ukraine-based candidates preferred (but open to strong remote profiles)

How to Apply

Please DM with:

1. A short summary of the last 2 SOC 2 projects you personally closed
2. Your availability to start immediately
3. Your rate (fixed price for the sprint or hourly)