Staff Security Analyst (Governance and Trust)

📋 Description

• Own the execution of Chainguard's external examinations (SOC 2, ISO 27001, Cyber Essentials, etc.)
• Build and maintain cross-functional relationships to support evidence collection and remediation
• Manage customer security diligence, including security questionnaires, audits, and Trust Center
• Oversee the third-party risk management program (vendor intake, assessments, and dispositions)
• Act as product owner for AI agent-based compliance tools (questionnaire responder and vendor triage)
• Turn recurring patterns into standardized artifacts and control improvements

🎯 Requirements

• Experience leading SOC 2 Type 2 and ISO 27001 audits from the auditee side
• Familiarity with regulated-industry security questionnaires (SIG, CAIQ, DORA-style)
• Experience running vendor risk assessments in a third-party risk program
• Understanding of evidence-as-data principles and Git-managed controls
• Strong written and verbal communication for auditors, customers, and executives
• Experience directing or mentoring junior practitioners

🎁 Benefits

• Flexible remote-first culture with bi-annual summits and monthly stipend
• Stock options with 10-year exercise window
• 100% covered health, vision, and dental insurance for employees and dependents
• Unlimited flexible time off
• 18 weeks paid parental leave for birthing parents, 12 weeks for non-birthing parents