Compliance Engineering Lead

About the role

The role combines security, engineering, risk management, automation, and customer assurance in a high-growth environment. You'll build continuous evidence pipelines, automate control monitoring, and strengthen vendor and risk-management programs. You’ll also shape the organization’s approach to AI assurance and emerging regulatory frameworks.

Requirements

• Proven SOC 2 Type II ownership: personally accountable for at least two complete SOC 2 Type II cycles, including auditor management, scoping, evidence, controls, and remediation of findings.
• Strong ISO 27001 expertise: experience taking an organization through certification or managing an ISMS through surveillance audits, with a practical understanding of how to make the system operationally effective.
• Compliance automation experience: comfortable building and maintaining automations against APIs and operational systems; you naturally look for opportunities to replace repetitive manual processes with scheduled, reliable workflows.
• Hands-on experience with GRC and compliance platforms such as Drata, Vanta, or comparable solutions, combined with sound judgment about their strengths and limitations.
• Strong risk prioritization skills, with the ability to distinguish meaningful security and compliance risks from lower-value administrative or audit preferences.
• Excellent written and verbal communication skills, with the ability to produce clear materials for auditors, enterprise security teams, engineers, and executive stakeholders.
• A strong ownership mindset and willingness to solve ambiguous, cross-functional problems at the intersection of Security, Engineering, Legal, and Go-to-Market.
• Experience working effectively in a remote, fast-moving environment where priorities evolve and processes may need to be created from the ground up.
• Ability to balance strategic program ownership with hands-on execution, including automation, control testing, evidence management, and operational improvements.

Benefits

• Market-competitive salary bands.
• Meaningful equity program.
• Comprehensive health benefits for employees and their families, with 99% coverage.
• Flexible time off, paid holidays, and a winter shutdown for rest and recharge.
• Paid parental leave.
• Remote-first working environment.
• Quarterly team off-sites.
• An ownership-driven culture emphasizing excellence, urgency, rigorous thinking, trust, collaboration, and customer focus.
• Significant autonomy and the opportunity to shape a foundational compliance and GRC function.