AI Assurance & Compliance Lead

Sysdig; United States; On-site; USD 160,000 - 200,000; Full time

Benefits offered by this job

Extra days off

401(k) match

Maternity leave

Mental health support

Health benefits

Job summary

Sysdig is seeking a senior security/compliance engineer to own the certification program end-to-end. You will build AI assurance from the ground up, design engineered controls, and ensure evidence is produced continuously rather than manually.

This role sits in Security Engineering and interfaces with auditors and customers. Ideal candidates have hands-on automation experience, cloud security expertise, and a track record across SOC 2 and ISO frameworks.

Qualifications

• Experience running certification and audit programs end-to-end for a cloud or SaaS company.
• Shipped code or automation in service of a control objective (Python/Go/Terraform/CI pipelines or API wired into a compliance platform).
• Depth in at least two of SOC 2, ISO 27001, ISO 27701, ISO 42001.

Responsibilities

• Own the certification program end-to-end, including scope, readiness, fieldwork, sampling requests, and remediation.
• Build AI assurance from nothing, covering model and agent behavior, data handling, and AI-assisted development.
• Operate and optimize evidence generation, questionnaire drafting, control validation, and gap analysis.
• Represent Sysdig externally, engaging customer security teams and publishing the work.

Skills

Auditing

Compliance engineering

Security governance

Cloud security

Education

Bachelor's degree in a related field

Tools

Python

Go

Terraform

CI pipelines

APIs

Job description

Sysdig is seeking a senior security/compliance engineer to own the certification program end-to-end. You will build AI assurance from the ground up, design engineered controls, and ensure evidence is produced continuously rather than manually.

This role sits in Security Engineering and interfaces with auditors and customers. Ideal candidates have hands-on automation experience, cloud security expertise, and a track record across SOC 2 and ISO frameworks.