Lead Security Compliance Engineer

📋 Description

• Own internal and external audits and examinations end to end from scoping and readiness through
• Identify gaps against frameworks we do not yet meet, define the strategy to close them, and drive
• Own security policies and standards end to end — author and maintain the policy, standard, and
• Determine control design and implementation details for net-new controls, provide technical
• Define control health metrics and build the pipelines behind them from the systems we already run
• Automate and streamline our Security Trust & Compliance workflows — control testing, continuous

🎯 Requirements

• In-depth understanding of multiple security and privacy frameworks — such as NIST CSF 2.0, CIS
• A track record of personally owning security and privacy compliance audit programs end to end
• Experience writing policies and standards that are precise enough to test and clear enough for
• Deep experience designing, assessing, and continuously monitoring modern security and privacy
• Experience with GRC engineering and security automation in general, especially applying AI and
• Knowledge of various enterprise SaaS applications, cloud infrastructure such as AWS and Kubernetes

🎁 Benefits

• Participation in the company's annual cash bonus plan
• Variable compensation (OTE) for sales and customer success roles
• Equity
• Sign-on payments
• Comprehensive health, welfare, and wellbeing benefits based on eligibility