Compliance Specialist, IT​/Tech

Cirrascale Cloud Services provides high-performance cloud infrastructure purpose-built for deep learning, generative AI, and large-scale AI inference workloads. We specialize in dedicated GPU cloud solutions tailored to the unique needs of startups, research labs, and enterprise AI teams. Our mission is to accelerate AI innovation by combining powerful hardware with white-glove service and flexible, custom-built environments.

Cirrascale is seeking a detail-oriented and proactive Compliance Specialist to support the company's security and compliance programs. This role will have a primary focus on managing Vanta, maintaining compliance readiness, coordinating SOC 2 activities, tracking security and compliance requirements, and ensuring identified gaps are addressed in a timely manner.

The Compliance Specialist will work closely with Operations, Engineering, Data Center, and leadership teams to maintain compliance requirements and support the company's security posture. The ideal candidate is highly organized, comfortable working across teams, and able to identify outstanding compliance requirements, follow up with owners, and drive items through completion.

• Own the day-to-day administration and management of Vanta.
• Monitor Vanta dashboards, controls, policies, integrations to proactively identify missing, expired or incomplete items necessary to ensure system readiness and compliance requirements are maintained at the highest possible level.
• Collect and maintain evidence and follow up with employees, managers, and technical teams on outstanding compliance requirements.
• Maintain accurate compliance records, evidence, and documentation within Vanta and all relevant areas of the Cirrascale Business Management System.
• Coordinate required employee security and compliance training and track completion.

• Support the company's Business Management system to ensure compliance and audit readiness to SOC 2 Type II and all relevant standards of ISO, CMMC, and FedRAMP certification programs.
• Coordinate evidence collection and ensure requested documentation is complete and available.
• Track Business Management controls, testing requirements, exceptions, and remediation items.
• Work with internal teams to identify and address compliance gaps before audits.
• Coordinate with external auditors and provide requested documentation and evidence in partnership with leadership.
• Maintain organized records of audit activities, findings, and remediation efforts.

• Partner with Operations, IT, Engineering, and Data Center teams to monitor process compliance and technical security requirements.
• Help ensure data center security controls, access requirements, documentation, and procedures remain current and aligned with company and customer requirements.
• Track security-related action items and follow up with responsible teams to ensure timely completion.
• Assist in identifying potential compliance or security gaps and elevate issues appropriately.
• Support ongoing reviews of access controls, security policies, employee requirements, and other compliance-related controls.
• Maintain compliance policies, procedures, and supporting documentation.
• Track policy acknowledgments and required employee compliance activities.
• Assist with security awareness and compliance training initiatives.
• Ensure compliance documentation remains accurate, current, and accessible for audits and internal review.

• Serve as a central point of contact for day-to-day compliance questions and requests.
• Coordinate compliance-related tasks across multiple departments.
• Maintain compliance calendars, deadlines, and action-item tracking.
• Provide regular updates to leadership regarding compliance status, outstanding items, and areas requiring attention.
• Assist with customer security questionnaires and compliance requests as needed.
• Support additional security, compliance, and operational initiatives as assigned.

• 2-4 years of experience in compliance, information security, risk management, audit, or a related field.
• Experience supporting internal or external audits.
• Experience working with a GRC/compliance platform such as Vanta, or similar.
• Strong organizational and project management skills.
• Ability to manage multiple deadlines and follow up with multiple stakeholders.
• Strong attention to detail and ability to identify missing or inconsistent information.
• Strong written and verbal communication skills.
• Ability to work independently and take ownership of assigned compliance activities.
• Comfortable working with both technical and non-technical teams.

• Working knowledge of SOC 2 and general information security controls.
• Experience supporting a SOC 2 Type II environment.
• Experience managing Vanta or a similar compliance platform.
• Experience working with data center, cloud infrastructure, or technology companies.
• Familiarity with…