DevSecOps & SOC 2 Readiness

US-based startup looking for a DevSecOps / Security & SOC 2 readiness specialist to help us professionalize our GitHub, code security, access controls, deployment practices, and compliance foundation. This role combines hands-on GitHub/DevOps organization with practical CISO-style judgment: reviewing repo structure and permissions, implementing least-privilege access, branch protections, secrets management, secure offboarding, audit logs, CI/CD safeguards, and documentation needed for SOC 2 Type 1 and future Type 2 readiness. The ideal candidate has experience supporting early-stage or data-driven startups, can balance security with speed, and can turn messy current-state systems into clear policies, controls, checklists, and implementation steps without overengineering.