Customer Data Steward

ABOUT THE ROLE

In this role, you will support SOC 2 compliance and audit readiness across delivery projects throughout the full SOC 2 lifecycle - from project onboarding and control implementation to audit preparation and closure.

You will work closely with project managers, delivery directors, internal auditors, and other key stakeholders to monitor compliance progress, provide guidance on SOC 2 requirements, support external audits, and ensure timely completion of required activities and evidence.

You will also help improve the SOC 2 journey for project teams by maintaining relevant materials, sharing process and control updates, gathering feedback, and proposing improvements to make compliance a consistent part of project delivery.

RESPONSIBILITIES

• Onboard project managers and delivery directors to the SOC 2 audit process through a structured four-week program covering controls overview, deep-dives into specific controls, and onboarding checklist sign-off
• Conduct introductory kickoff sessions, controls overview meetings, and execution onboarding sessions - approximately 2 hours of live time per week per onboarding cohort
• Consult project managers and delivery directors on questions regarding SOC 2 processes, evidence requirements, control implementation, audit types, and timelines
• Deliver concierge-level support for priority accounts where clients require enhanced data governance engagement
• Monitor the progress of SOC 2 onboarding checklist completion and SOC 2 self-checks on a weekly basis
• Track overdue items and execute the escalation matrix - from initial reminders to PMs, through delivery director escalation, up to VPD and CISO-level notifications
• Review the PLCD (Project Lifecycle Compliance Dashboard) report weekly to identify controls in the red zone and proactively communicate with project managers
• Monitor project readiness across the SOC 2 lifecycle stages: onboarding, execution, audit preparation, and closure
• Support project managers during the external audit phase (EY), including consulting on requested evidence, preparing PMs for auditor interviews, attending interview sessions, and validating uploaded evidence in the Canvas Client Portal
• Communicate with internal auditors, review the results of quarterly internal audits, and follow up on identified nonconformities until mitigation actions are completed
• Prepare and maintain evidence workflows, ensuring evidence is uploaded, reviewed, and accepted on time
• Share updates and changes in processes, controls, and the SOC 2 roadmap with PMs and DDs through monthly calls, presentations, and SharePoint resources
• Develop and maintain SOC 2-related materials for project managers, including onboarding presentations, control descriptions, guides, one-pagers, and the SOC 2 SharePoint space
• Update the SOC 2 onboarding checklist and self-check forms when controls change, ensuring all related materials stay aligned
• Gather and analyze feedback from project managers on the SOC 2 process, facilitate retrospectives, and propose actionable improvements to optimize the SOC 2 workflow

REQUIREMENTS

• 3+ years of experience in delivery, project management, business analysis, quality assurance, information security, or a related role in a software development company
• Understanding of how a software development company operates, its business models, and how delivery departments manage customer information
• Experience working with compliance frameworks, audit processes, or information security programs; experience with SOC 2, ISO 27001, or similar certifications is a plus
• Results-oriented and diligent approach, with a sense of urgency, ownership of your work, and a strong focus on defined deliverables and meeting deadlines
• Ability to build trust with project managers, delivery directors, and key stakeholders and drive follow-through on SOC 2 obligations
• Strong written and verbal communication skills, with the ability to communicate clearly and confidently at different organizational levels - from onboarding sessions and large monthly calls to one-on-one escalations
• Ability to navigate a matrix organization effectively and resolve conflicts constructively when project teams push back on compliance requirements
• Strong attention to detail combined with the ability to see the bigger picture, including tracking large volumes of onboarding checklists and self-checks while maintaining an understanding of overall audit readiness
• Awareness of U.S. and European business practices and cultural norms related to data management
• Upper-intermediate English level or higher
• Familiarity with project management and reporting tools and platforms such as Workday, Asana, and Power BI is a plus
• Understanding of Secure SDLC and how data governance controls integrate into software delivery is a plus