Compliance Manager, IT​/Tech

Join to apply for the Compliance Manager I role at BEMO
.

The Compliance Manager I, Level 4 plays a critical role in ensuring BEMO and our customers maintain compliance with leading security and privacy frameworks, including SOC 2, ISO 27001, HIPAA, CMMC 2.0, and ISO 42001
. This role combines deep compliance knowledge with strong project management and communication skills to drive recertification readiness, support customer projects, and improve internal compliance processes.

The Compliance Manager operates with a high degree of autonomy, leading complex cross‑departmental efforts and interfacing with auditors, customers, and internal teams to ensure continuous alignment between operational practices and compliance obligations.

• Lead all BEMO and customer compliance renewals across frameworks (SOC 2, ISO 27001, HIPAA, CMMC 2.0, ISO 42001).
• Own monthly compliance maintenance tasks ensuring readiness for internal and customer audits.
• Develop, maintain, and update all compliance‑related documentation
  , including procedures, playbooks, and training content.
• Manage auditor relationships
  , prepare evidence, coordinate responses, and lead walkthroughs.
• Plan and lead annual certification projects and tabletop exercises to validate operational and security resilience.
• Automate compliance
  processes via AI Agents and other means of tracking within BEMO applications and reporting.

• Lead Managed Services and project compliance efforts
  , ensuring customer environments align with BEMO’s compliance standards.
• Facilitate tabletop exercises
  , audits, and assessments for customers to ensure alignment with regulatory requirements.
• Collaborate with internal project managers, engineering, and leadership to ensure compliance deliverables are integrated into project life cycles.
• Critique and improve compliance processes, identifying opportunities for simplification, automation, and improved documentation.
• Drive organizational change management initiatives to successfully land new compliance processes.
• Support and sales and project teams in customer‑facing compliance discussions and documentation requests.
• Contribute to proposal reviews, questionnaires, and customer assessments involving compliance or security obligations.
• Build trust and act as a subject‑matter expert for internal and external stakeholders.
• Operates independently, managing multiple complex compliance projects with minimal oversight.
• Demonstrates advanced understanding of compliance frameworks and their application in SaaS, cloud, or managed services environments.
• Uses structured problem‑solving, data analytics and automation to identify gaps and propose practical, scalable solutions.
• Builds strong peer‑to‑peer and leadership relationships across departments.
• Communicates clearly and consistently with technical and non‑technical audiences.
• Functions effectively in ambiguous or evolving regulatory environments
  , adapting quickly and guiding others through change.
• Proactively documents, trains, and reinforces compliance processes to strengthen organizational maturity.

• Bachelor’s degree in Business, Information Security, IT Management, or related field (or equivalent experience).
• 5+ years of experience in compliance, audit management, or information security programs
  .
• Proven track record managing SOC 2, ISO 27001, HIPAA, or CMMC certifications or renewals.
• Experience in cloud‑based environments (Microsoft 365, Azure) preferred.
• Familiarity with Drata
  , Vanta
  , or similar compliance automation tools a plus.
• PMP, CISA is a plus.

• Deep understanding of compliance frameworks and control implementation.
• Must have led programmatic change in compliance
  .
• Must have hands‑on advanced data analytics and process improvement knowledge and experience.
• Must have a vision for how to stand up a compliance organization from scratch that serves internal functions and Customers.
• Must have deep knowledge of the Microsoft security stack (Purview, Entra, Defender).
• Must have familiarity with audit processes and have led audits.
• Strong project management and…