Compliance Manager

About Procare For over 30 years, Procare Solutions has been dedicated to empowering early childhood educators by providing products and services that enable them to focus on the care, safety and education of children. We recognize the responsibility that comes with nurturing and educating children, which is why our child care management solutions are designed to automate business processes, help ensure safety and compliance, communicate with families and provide educational resources and training to help teachers and children thrive. Over 40,000 satisfied customers have chosen Procare Solutions as their trusted partner in providing exceptional care for young minds. A Little About the Role We're looking for a Compliance Manager to own and mature our compliance program as we scale. You'll be the primary driver of our SOC 2 Type 2 audit program for 5 products, and will provide critical support across SOX, privacy, PCI, HIPAA, and additional regulatory and professional framework compliance efforts. This is a hands-on role for someone who enjoys building repeatable processes, working cross-functionally with engineering and IT teams, and translating regulatory and contractual requirements into practical, auditable controls for business units. You'll lead a small team: analysts, contractors, stakeholders - making this a great opportunity for someone ready to take on people leadership while staying close to the technical and operational details of compliance work. What you’ll do: SOC 2 Type 2: Own the end-to-end audit lifecycle — scoping, control design, evidence collection, auditor liaison, remediation tracking, and continuous monitoring between audit cycles. SOX Support: Assist with IT general controls (ITGCs) testing, walkthroughs, and coordination with internal audit and external auditors to support financial reporting compliance. Privacy Audits: Support privacy compliance efforts (e.g., GDPR, CCPA/CPRA) including audit prep, control validation, and documentation of data handling practices. PCI Compliance: Support PCI DSS assessments, including scoping, control validation, and coordination with payment processing and engineering teams. Data Processing Addendums (DPAs): Review, negotiate and track DPAs with customers, vendors, and subprocessors, ensuring alignment with our data protection commitments and privacy obligations. Vendor & Third-Party Risk: Assess subprocessors and vendors for compliance posture and contractual data protection requirements. Controls Oversight: Partner with Engineering, IT, and Security teams to design, implement, and monitor controls; maintain a strong evidence trail and control library. Policy & Process: Maintain and evolve compliance policies, procedures, and control narratives to reflect the current environment and audit requirements, including ensuring NEO and annual training is released and accurate. Audit Readiness: Serve as a key point of contact for external auditors, customer…