Compliance Manager, IT​/Tech

Position Summary

The Compliance Manager supports compliance, security, and technology operations, assisting with security documentation, vendor reviews, internal audits, and policy enforcement.

The ideal candidate is detail-oriented, technically capable, and process-driven.

• Maintain and improve compliance policies and programs (e.g., SOC 2, data security, vendor compliance) and internal controls (such as during employee transitions).
• Facilitate internal compliance with relevant policies across all departments.
• Gather evidence of such compliance.
• Facilitate annual assessments certifying such compliance.
• Fulfill security questionnaires and vendor assessments.
• With respect to compliance, identify gaps, and recommend improvements.
• Support cybersecurity best practices (e.g., password management, MFA, endpoint security).
• Other Compliance and Security duties as required

• Assist with high level IT functions.
• Assist with Systems functions.
• Maintain documentation of other (non-compliance) business operations.

Success in this role will be measured by the ability to:

• Improve internal compliance with policies and standards.
• Pass compliance assessments.
• Ensure accurate IT, compliance, and audit documentation.
• Achieve timely completion of compliance requests, security questionnaires, and successful audits.

Better Car People is an Equal Opportunity Employer. We are committed to creating a diverse and inclusive workplace and do not discriminate based on race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity, or any other protected status under applicable law.

• 4+ years experience in compliance and security.
• Familiarity with compliance frameworks (e.g., SOC 2, NIST, CCPA) and related law (e.g., GLBA, TCPA, 10
  
  DLC, GDPR).
• Background in supporting SOC 2 audits, security questionnaires, and evidence collection.
• Strong organizational, documentation, and communication skills (technical and non-technical).
• Understanding of cybersecurity best practices.
• Familiarity with vendor risk management/third-party software reviews.
• Ability to manage multiple priorities and confidential information professionally.

• Experience in a SaaS, technology, or automotive/customer engagement environment.
• Familiarity with administrative tools such as Google Workspace, Microsoft 365, Slack, Jira, Salesforce, Okta, Last Pass, or similar.
• Relevant certifications (e.g., CompTIA, ITIL) are a plus.