AI-Driven Security Compliance Lead

Plaid; New York (NY); On-site; USD 141,000 - 259,000; Full time

Benefits offered by this job

Equity and Benefits

Job summary

Plaid is seeking a Security Compliance Lead to own the core compliance program (SOC 2 Type 2, ISO 27001, ISO 27701) and govern the control catalog end-to-end. You’ll drive governance, roadmap, and KPIs while aligning compliance with product development and engineering, enabling audits with efficient, AI-assisted evidence gathering.

You’ll partner with Product and Engineering to incorporate audit scope into launches, manage internal audits, and scale processes through automation.

Qualifications

• Has owned SOC 2 Type 2 and ISO 27001/27701 programs through multiple audit cycles and set roadmaps/KPIs.
• Built or rebuilt a common control framework mapped across multiple frameworks with clear owners/testing.

Responsibilities

• Own the compliance program and governance calendar for SOC 2 Type 2, ISO 27001, and ISO 27701 end-to-end.
• Build and maintain a single, mapped control catalog across frameworks with owners and quarterly certifications.
• Lead internal audits to test operating effectiveness and policy adherence; coordinate ITGCs and SOX with finance.
• Define mature program structure, roadmap, and KPIs; report progress to security leadership quarterly.
• Embed compliance checkpoints into product development and coordinate with Product/Engineering for audits.
• Scale through AI-driven automation for evidence gathering, testing, and audit requests.

Skills

SOC 2 Type 2 ownership

ISO 27001/27701 ownership

Control framework design

Internal audits & ITGC/SOX

Governance & product-integrated audits

AI-driven compliance tooling

EU regulatory exposure (nice to have)

Job description

Plaid is seeking a Security Compliance Lead to own the core compliance program (SOC 2 Type 2, ISO 27001, ISO 27701) and govern the control catalog end-to-end. You’ll drive governance, roadmap, and KPIs while aligning compliance with product development and engineering, enabling audits with efficient, AI-assisted evidence gathering.

You’ll partner with Product and Engineering to incorporate audit scope into launches, manage internal audits, and scale processes through automation.