Corporate Security & Compliance Specialist

JobsCloseBy Editorial Insights

Giga Energy seeks a Corporate Security & Compliance Specialist to own the physical security program across the Houston HQ and field sites while leading SOC 2 Type II readiness. With 5+ years in physical security or compliance facing roles, you will manage access controls, surveillance, visitor management, secure storage, incident response, audits, vendor management, and field site risk assessments. Expect ~30% travel, and relocation to Houston. The ideal candidate ships practical, auditable evidence, communicates clearly with site teams and executives, and thrives in fast moving environments. To apply, tailor your resume to demonstrate experience with GRC platforms (Drata, Vanta, OneTrust), end-to-end control design, and successful audit outcomes; highlight hands-on security operations, certifications, and a track record of improving security posture in energy or data center settings.

What you’ll do

As our Corporate Security & Compliance Specialist, you will own the physical security side of Giga’s compliance program. As we mature our security posture and pursue SOC 2 Type II, you’ll own physical security on the ground, across our Houston headquarters and our energy and data center sites in the field.

Where you’ll work

This role is based out of our Houston hub. Because physical security has to be verified where it actually lives, you must be willing to travel regularly to Giga’s sites and facilities. Expect roughly 30% travel, with periods of more during audit prep or new site buildouts.

Responsibilities

• Own Giga’s physical security program end to end across the Houston HQ and field sites, including physical access controls, monitoring, visitor management, and secure storage of assets and media.
• Administer physical access to facilities, ensuring access is granted based on least privilege and promptly removed when personnel are terminated or change roles.
• Run visitor management, including authorization, escorting, and logging of visitors to company facilities.
• Maintain physical monitoring and surveillance mechanisms and ensure they remain operational and effective at deterring and detecting unauthorized access.
• Conduct periodic reviews of physical access to validate that access remains appropriate, and document and implement any resulting changes.
• Oversee secure storage and handling of sensitive media, equipment, and other assets, restricting access to authorized personnel.
• Own and maintain physical security policies and procedures, keeping them current as the business and site footprint grow.
• Plan and execute regular site visits and physical security assessments to identify gaps, drive remediation, and verify controls are operating as designed.
• Assess and monitor external physical security threats to Giga’s sites and personnel, and coordinate with site leadership, vendors, and local law enforcement to mitigate risks to facilities and people in the field.
• Develop and maintain site security plans and incident response procedures for facilities, including protocols for protests, trespassing, or threats during construction and operation.
• Collect, organize, and maintain audit evidence for physical security controls within the company’s GRC platform, and serve as the physical-controls point of contact during SOC 2 and ISO audits.
• Manage physical security vendors and contractors (guard services, monitoring, badge and access systems), holding them to Giga’s standards.
• Respond to, investigate, and document physical security incidents, and partner with the CISO on the physical components of the broader security and risk program.

Requirements

• 5+ years of experience in physical/corporate security, security operations, or a closely related compliance-facing role.
• Experience with, or the aptitude to quickly learn, GRC platforms (Drata, Vanta, OneTrust, or similar) to collect and manage control evidence.
• Working knowledge of SOC 2 and ISO 27001 compliance frameworks, particularly the physical and environmental security and access control domains.
• Practical physical security background: badge/access systems, surveillance, visitor management, and facility access controls.
• Strong documentation and organizational skills; you can turn a walkthrough into clean, audit-ready evidence.
• Excellent written and verbal communication; able to work with site teams, vendors, and executives alike.
• Comfortable operating in ambiguous, fast-moving environments where the process may not exist yet; you build it.
• Based in or willing to relocate to Houston, and willing to travel regularly to sites (~30%).

Bonus Points

• Direct experience preparing for or supporting a SOC 2 Type II audit.
• Hands-on experience administering Drata specifically.
• Industry certifications such as ASIS PSP/CPP, Security+, or an ISO 27001 Lead Implementer/Auditor credential.
• Experience securing industrial, energy, data center, or other critical-infrastructure sites (vs. office-only environments).
• Familiarity with additional frameworks (NIST, ISO 27701) or environmental controls (fire suppression, HVAC, power) relevant to in-scope facilities.
• Experience managing guard services or physical security vendor relationships.
• A hands-on, get-it-done approach; comfortable in the field, not just behind a desk.

Benefits

• Subsidized health, dental, and vision insurance
• Equity (options) in a rapidly growing startup
• 401(k) with 4% employer match
• Unlimited PTO
• Parental leave
• Healthcare and Dependent Care Flexible Spending Accounts (FSA) or Health Savings Account (HSA)
• Commuter benefits