Trust & Compliance Operations Manager

Job description

**THE OPPORTUNITY** Join a team that’s changing financial services Zocks is the #1 AI assistant for financial advisors. We help advisors automate their operational work and grow their business. 5,000+ firms use Zocks to turn client conversations into completed work. We're a venture-backed team, building something that changes how financial advisors serve their clients every day. Every role here is an opportunity to shape the product, the company, and the way an entire industry works. We hire sharp, curious, and kind people who want to do meaningful work and build something from the ground up, together. **WHO YOU ARE** The SHARC in the room At Zocks, we hire for SHARC - five qualities that define how our best people work and win together. **S - Sharp** You move fast without cutting corners. Quick decisions, thoughtful execution - you know when to act independently and when to loop in leadership. **H - Hungry** You're a self-starter who celebrates teammates as loudly as your own wins. Humble hustle is your default mode. **A - Adaptable** Startup life means things shift fast. You lean into change, pivot gracefully, and genuinely enjoy figuring out what's next. **R - Resilient** Building something new isn't always smooth. You bounce back stronger, see obstacles as puzzles, and never lose sight of the bigger picture. **C - Curious** You ask the questions others miss. You explore for fun, not just for work - and it shows in the quality of your thinking. ### About the Role Zocks sells into compliance-sensitive financial services buyers - RIAs, IBDs, and wealth management firms - who put every vendor through security and compliance diligence before signing. Today, that diligence work falls on individual AEs, who complete VDDQs, RFPs, and RFIs themselves on top of their deal work, with no single owner, no shared knowledge base, and no visibility into how much it's costing the business in cycle time. The Trust & Compliance Operations Manager owns this function end to end - the data room, the trust center, the VDDQ/RFP response process - turning diligence from a deal-blocking bottleneck reps absorb into a well-run, self-service function that shortens sales cycles and reinforces trust with our buyers, pre- and post-sale. ### What You’ll Do **1. VDDQ, RFP, and RFI Ownership** - Serve as the single point of accountability for every vendor due diligence questionnaire, RFP, and RFI that touches a deal - new business, renewal, or expansion. - Take response ownership off individual AEs entirely, running intake, drafting, internal review, and submission as a repeatable process. - Track every open request to a defined SLA and flag at-risk deals to Sales leadership before they slip. **2. Knowledge Base and Trust Center** - Build and maintain a living knowledge base of pre-approved, audit-ready answers to recurring security, privacy, and compliance questions. - Keep that knowledge base current with each SOC 2 cycle, policy update, or material product/infrastructure change. - Partner with Engineering to scope and launch a self-service trust center when the knowledge base and process are mature enough to support it. **3. Data Room Management** - Own the structure and upkeep of the due diligence data room - taxonomy, document versioning, access controls, and what's customer-facing versus internal. - Ensure every document in the room reflects the current state of Zocks' security and compliance posture, not a stale snapshot from the last deal. **4. Cross-Functional Partnership** - Act as the connective tissue between Security, Legal, and Product on one side and Sales/CS on the other, so sales teams get accurate, current information without chasing multiple internal owners. - Build direct relationships with subject-matter owners in each function to keep source information flowing without manual chasing on every request. **5. Reporting and Commercial Impact** - Define and publish an SLA for DDQ/RFP turnaround, and hold the function to it. - Report quarterly on deals unblocked or accelerated by the function, quantified in $ ARR, so leadership can see the direct commercial value of the work. ### What We’re Looking For ### Requirements - 4+ years experience owning VDDQs/RFPs/RFIs end to end, ideally in a regulated B2B SaaS environment - Working knowledge of security, privacy, and compliance frameworks relevant to financial-services vendors - SOC 2, ISO 27001, NIST CSF, GLBA/Reg S-P, and SEC/FINRA vendor oversight expectations - Demonstrated ability to translate technical and legal detail into plain-English, customer-ready language under deadline pressure - Experience building repeatable process and structure (data room taxonomy, knowledge base, SLAs) rather than handling diligence as one-off firefighting - Comfortable working cross-functionally with Security, Legal, Engineering, and Product to source accurate answers without deep technical expertise in each domain - Experience operating directly with prospects' and customers' security, compliance, and vendor-management teams, including on live diligence calls - Experience in or selling to financial services, wealthtech, or another regulated industry strongly preferred, given Zocks' focus on financial advisors and wealth management firms - Bachelor's degree or equivalent practical experience ### **LOGISTICS** - This is a remote position, but we are currently only able to hire candidates who reside in the following states: AZ, CA, CO, CT, FL, GA, ID, IL, IA, KS, MA, MI, NE, NJ, NV, NY, NC, OH, PA, SC, TN, TX, WA, WI - Background and reference checks required as part of onboarding **Interview process:** - 30-min recruiter screen - Up to three 30-45-min video or onsite interviews - Offer pending references. Total estimated time: ~3 hours **COMPENSATION** - $150,000-$175,000 base salary - Equity - we're all building this together