Senior Compliance Engineer
About Hevo Hevo is a fully-managed, no-code data pipeline platform that helps organizations move, transform, and activate their data in real time. With 150+ pre-built, battle-tested connectors, Hevo lets data teams focus on insights instead of pipeline maintenance — trusted by 2,000+ organizations globally to keep their data flowing reliably, securely, and in compliance with standards like SOC 2, GDPR, CCPA, DORA and HIPAA.
About the Role As Hevo's enterprise customer base grows, security and compliance reviews are an increasingly visible part of how deals get done. We're looking for a Senior Compliance Engineer to own our GRC program end-to-end — audits, risk, vendor management, and policy — and to be the technical face of security and compliance to customers and prospects during due diligence. Strong communication is essential: this role is regularly customer-facing and needs to translate technical detail into language that builds trust.
, Sprinto, Vanta, Drata, or similar) to automate evidence collection and monitoring What We're Looking For — Must-Haves 4+ years in GRC/compliance engineering or related roles (compliance, audit, information security) Hands-on experience running SOC 2/ISO 27001 (or similar) audits end-to-end Strong understanding of data protection & privacy — GDPR, HIPAA, PII/PHI handling Proven ability to manage vendor/third-party risk assessments Excellent written and verbal communication — comfortable presenting to and negotiating with external customers, auditors, and executives Experience responding to customer security questionnaires / RFPs Working knowledge of cloud environments (AWS) — enough to assess and discuss controls with engineering Strong organizational skills — able to manage multiple audits and timelines independently Nice to Have Experience with GRC automation platforms (Sprinto, Vanta, Drata, OneTrust) Relevant certifications (CISA, CRISC, ISO 27001 Lead Auditor/Implementer, CIPP) Experience in a B2B SaaS company handling enterprise customer data