Lead Security & Compliance Engineer (First Hire)

Coram; Greater London; Sur place; GBP 90 000 - 150 000; Plein temps

Résumé du poste

Coram AI is hiring its first Lead Security & Compliance Engineer to own security, IT and compliance across the organization. You’ll drive SOC 2 Type II, ISO 27001 and other frameworks, automate controls, and partner with engineering leadership on secure design and incident response.

You’ll work with global customers, shape risk posture, build a security roadmap, and scale the function as the team grows, with opportunities to influence policy and vendor management across US, UK and India offices.

Qualifications

• 8+ years in security, compliance or IT with ownership of a security and compliance programme at a B2B startup or scale‑up.
• Personally led a SOC 2 Type II audit, plus at least one more framework such as ISO 27001, HIPAA, CJIS, CMMC, ITAR or FedRAMP.
• Experience selling into enterprise, government, law enforcement, defence or healthcare customers, and working closely with sales on security reviews.
• Technical enough to work credibly with engineers: scripting (Python or Bash), cloud and infrastructure-as-code basics, identity platforms and device management.
• Able to explain risk clearly to non-technical people, and to push back on sales or leadership when it matters.

Responsabilités

• Own our compliance programmes end to end, starting with SOC 2 Type II and ISO 27001: controls, evidence, policies, auditors and remediation.
• Lead our path to the frameworks customers ask for most, including NDAA / TAA, HIPAA, CJIS, CMMC, ITAR and FedRAMP, and decide which to certify against and which to answer with documentation.
• Partner with sales on customer security reviews, questionnaires and due-diligence calls, and build a trust centre and reusable answers so deals move faster.
• Own data flows, retention and privacy controls for sensitive video and biometric data, including GDPR, Illinois BIPA and state-by-state retention rules.
• Make compliance real: automate onboarding, offboarding and access reviews, and manage identity, SSO, MFA, device management and endpoint protection.
• Own IT systems and vendors across our US, UK and India offices.
• Work with engineering on security fixes and architecture changes, and lead incident response and customer communication when something goes wrong.
• Build a prioritised security roadmap, report progress to leadership, and hire as the function grows.

Connaissances

SOC 2 Type II

ISO 27001

HIPAA

CJIS

CMMC

ITAR

FedRAMP

Scripting (Python/Bash)

Cloud & IaC

Identity platforms

Device management

Risk communication

Enterprise security collaboration

Outils

Python

Bash

Cloud platforms (AWS/Azure/GCP)

Description du poste

Coram AI is hiring its first Lead Security & Compliance Engineer to own security, IT and compliance across the organization. You’ll drive SOC 2 Type II, ISO 27001 and other frameworks, automate controls, and partner with engineering leadership on secure design and incident response.

You’ll work with global customers, shape risk posture, build a security roadmap, and scale the function as the team grows, with opportunities to influence policy and vendor management across US, UK and India offices.