Compliance & Security Lead

present of AI; United Kingdom; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

Trigger.dev is seeking a Senior Security & Data Protection Lead to own compliance in a remote or hybrid UK setting. You will drive SOC 2 audits, review GDPR/DPAs, and draft clear policies for engineers, while communicating with product teams about cloud security, access controls and logging.

The role emphasizes AI-era compliance, automation-assisted questionnaire responses, and ongoing adaptation to frameworks like ISO 27001 or ISO 42001 as needed.

Qualifications

• Hands-on experience with SOC 2 audits.
• Proficient in UK/EU GDPR and DPAs.
• Ability to draft clear security policies for engineers.

Responsibilities

• Review and negotiate DPAs with partners.
• Respond to security questionnaires accurately and quickly.
• Oversee cloud security controls, access management and logging.
• Develop and maintain incident response readiness.

Skills

SOC 2 audits

GDPR (UK/EU)

DPA negotiation

Security questionnaires

Cloud infrastructure security

Access control

Policy writing

Incident response

Job description

Finance & Legal · Remote or Hybrid UK · FullTime · Senior level

The role is the first dedicated owner of security compliance and data protection at a small developer tools company. A strong candidate has run SOC 2 audits hands on, knows UK and EU GDPR well enough to review DPAs, and can answer security questionnaires quickly and accurately. They also need enough technical grounding to discuss cloud infrastructure, access control and logging with engineers, and to write policies in plain language.

How it fits the AI era

AI is part of the job itself: the posting expects AI and automation to speed up questionnaire drafting, evidence collection and policy review. The human side stays with judgment calls, such as deciding when new frameworks like ISO 27001 or ISO 42001 are needed, negotiating data terms, and keeping incident response ready. The role also supports a product that runs AI agents, so compliance has to keep pace with how that infrastructure works.

How it builds AI experience

The work offers direct practice using AI tools for compliance tasks, from drafting questionnaire answers to reviewing evidence and policies. It also builds understanding of AI management standards, since ISO 42001 is named as a possible future framework. Candidates can prepare by getting comfortable with compliance automation platforms and by learning how AI agents are deployed and scaled in cloud environments.

Worth showing

• UK and EU GDPR
• DPA review and negotiation
• Plain policy writing

This is our own read, written from the employer's posting and the company's Spotlight. The employer's posting is the source of truth for the role.

About Trigger.dev

Open-source background jobs and durable workflow orchestration engine for long-running AI agents in TypeScript, per the company.