Security Compliance Lead

📋 Description

• Own the compliance program and governance calendar: Lead SOC 2 Type 2, ISO 27001, and ISO 27701 end
• Build and own the control catalog: Design and maintain one control catalog mapped across every
• Run internal audit and policy assurance: Build a risk-based internal audit plan that tests
• Set direction and measure the program: Define what a mature program looks like, set the roadmap and
• Embed GRC by design: Track product roadmaps and supporting infrastructure with Product and
• Scale through AI and automation: Build repeatable processes, runbooks, and AI-driven automation for

🎯 Requirements

• Has been the accountable owner of SOC 2 Type 2 and ISO 27001/27701 programs through multiple audit
• Has built or rebuilt a common control framework mapped across multiple frameworks, with control
• Hands-on FedRAMP experience (Rev5 or 20x): NIST 800-53 control implementation, boundary and SSP
• Has planned and run risk-based internal audits that test operating effectiveness and policy
• Has worked with Finance or internal controls teams and external auditors on ITGCs and SOX
• Has partnered with Product and Engineering to scope launches and infrastructure changes into

🎁 Benefits

• Medical, dental, vision, and 401(k)