AI-Driven Security Compliance Program Lead

Plaid Inc.; United States; Remote; USD 180,000 - 260,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k)

Equity/bonus potential

Job summary

Plaid’s Security Governance, Risk, and Compliance team leads the core security compliance program across SOC 2 Type 2, ISO 27001, and ISO 27701. You will drive the program structure, roadmap, and KPIs while embedding audits into product development and using AI-driven automation to streamline evidence gathering.

As Security Compliance Lead, you’ll own end-to-end governance, build a unified control catalog, and coordinate audits with internal teams and regulators to keep plaind commitments

Qualifications

• Has owned SOC 2 Type 2 and ISO 27001/27701 programs across multiple audits.
• Built or rebuilt a common control framework across multiple frameworks, with testing.
• Hands-on FedRAMP experience (Rev5 or 20x), NIST 800-53 control implementation and SSP.
• Planned and run risk-based internal audits; worked with auditors on ITGCs/SOX.
• Partnered with Product and Engineering to scope launches into audits and embed checks.

Responsibilities

• Own the compliance program and governance calendar; manage SOC 2/ISO timelines with owners and evidence.
• Build and maintain a cross-framework control catalog with owners and testing cadence.
• Run internal audits and policy assurance; track findings to remediation and cycle policies.
• Set roadmap and KPIs for a mature program; report progress to security leadership quarterly.
• Embed GRC by design in product roadmaps; assess launches for audit scope and boundaries.
• Scale via AI-driven automation for evidence, testing, scoping, and audit requests.

Skills

Compliance ownership

FedRAMP experience

Internal audit

Governance & audits

AI tooling

Job description

Plaid’s Security Governance, Risk, and Compliance team leads the core security compliance program across SOC 2 Type 2, ISO 27001, and ISO 27701. You will drive the program structure, roadmap, and KPIs while embedding audits into product development and using AI-driven automation to streamline evidence gathering.

As Security Compliance Lead, you’ll own end-to-end governance, build a unified control catalog, and coordinate audits with internal teams and regulators to keep plaind commitments