SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Anyscale is building the commercial platform around Ray, an open-source distributed computing framework used by OpenAI, Uber, Spotify, and others to scale machine learning workloads. As Anyscale grows and works with larger, more demanding customers, compliance has become a customer-facing, contractual function requiring dedicated ownership.
You will own the compliance function end-to-end: SOC 2 Type II and ISO 27001 audit programs, evidence collection and management, risk registers, and security diligence for enterprise and regulated customers. This is a program-ownership role reporting to the Head of Security with full autonomy and accountability. You will not have a senior compliance function above you; you are that function.
Key responsibilities include:
- Owning SOC 2 Type II and ISO 27001 programs, including scope, evidence, control operation, and external auditor relationships
- Building and maintaining a complete, audit-ready evidence base using compliance automation platforms
- Leading security diligence for enterprise customers: questionnaires, audit responses, right-to-audit requests, and recurring reporting
- Establishing and maturing the risk register as an enterprise-aligned program
- Coordinating compliance obligations from customer contracts (data protection, breach notification, vendor assessments) in partnership with legal
- Assessing and standing up new certifications as the customer pipeline requires
- Partnering with engineering and IT to make evidence collection a byproduct of normal operations rather than manual pre-audit scrambles
In your first year, success means a complete and defensible evidence base with clean audit outcomes, a repeatable process for customer security diligence, and a risk register that leadership actively uses.
About Anyscale
AI / Data / Infrastructure — distributed computing and AI workload platform built around Ray.
