Your startup has twelve team members, a working SaaS product, and an expanding customer base. Everyone cares about security, but no one holds “compliance manager”