Opal Security
Security & Compliance Lead
$120K–$200K
San Francisco · On-site · Full-time · Posted Jul 29, 2026
- Experience
- 5+ years in security operations, GRC, IT security, or a similar security-focused role.
About the job
Own Opal’s internal security program, including security operations, SOC 2 compliance, vendor risk, incident response, vulnerability coordination, and IT oversight through an MSP.
What you'll do
- Manage security tooling, access controls, incident response, and internal security operations.
- Drive SOC 2 controls, audit readiness, policies, risk tracking, and remediation.
- Manage vendor security and vulnerability-program operations, and oversee MSP-delivered IT services.
What they ask for
- 5+ years of experience in security operations, GRC, IT security, or a similar security-focused role.
- Experience owning or materially driving a company security program.
- Strong familiarity with SOC 2 and experience with incident response, endpoint security, access reviews, logging/monitoring, and remediation tracking.
- Experience managing external security partners and comfort managing IT operations through an MSP or similar provider.
Nice to have
- Experience at a security, identity, or access management company, or running bug bounty/vulnerability disclosure programs.
- Security certifications such as Security+, CISSP, CISM, or similar; experience building or maturing an early-stage security program.
Pay
$120K – $200K (base salary)
Tools
SOC 2, FedRAMP, ISO 27001, SSO, MFA, UniFi
Model-written summary · the original posting is authoritative