Security & Compliance Operations Manager

About the Company

Mintlify is on a mission to empower builders. Our docs platform serves 100 million+ developers every year and powers documentation for 20,000+ companies, including Anthropic, Microsoft, PayPal, Spotify, and Coinbase.

Responsibilities

• Run five compliance programs end-to-end including SOC 2 Type II, ISO 27001, ISO 42001, GDPR, and Microsoft SSPA
• Own the audit calendar, evidence collection, remediation tracking, and auditor relationships
• Administer Drata to manage monitors, evidence validation, policies, and the trust center
• Manage the vendor bench, including vCISO engagement and security/compliance vendor renewals
• Run standing processes such as security questionnaire escalation, inbound vendor security reviews, and bug bounty coordination
• Act as the customer-facing compliance voice for trust centers, DPAs, and enterprise security requirements
• Coordinate technical work with Engineering DRIs to ensure smooth compliance operations

Requirements

• 3+ years in GRC, compliance program management, or security operations with direct audit ownership
• Hands-on experience with compliance platforms like Drata or Vanta
• Proven experience in vendor and auditor relationship management
• Meticulous follow-through and attention to detail
• Bias toward automation and scalable processes

Preferred Qualifications

• ISO 42001 or AI governance exposure
• GDPR operations experience (DSARs, RoPA, consent tooling)
• Experience as a sole compliance owner in an early-stage startup