Lead Security & Compliance Engineer

Coram; Sunnyvale (CA); On-site; USD 180,000 - 280,000; Full time

Job summary

Coram AI is hiring its first Lead Security & Compliance Engineer to own security, IT and compliance. You will manage SOC 2 Type II and ISO 27001 programs, coordinate with sales on reviews, and implement automated controls across our cloud-native platform.

The role involves working with engineering leadership and growing the function on-site in the Bay Area. You will lead data retention, privacy controls, and incident response, while building a scalable roadmap and team as Coram AI expands across

Qualifications

• 8+ years in security, compliance or IT with ownership of a security & compliance program at a B2B startup or scale-up.
• Led a SOC 2 Type II audit, plus another framework such as ISO 27001, HIPAA, CJIS, CMMC, ITAR or FedRAMP.
• Experience selling into enterprise, government, law enforcement, defence or healthcare, collaborating with sales on security reviews.
• Technical with engineers: scripting (Python or Bash), cloud and IaC basics, identity platforms and device management.
• Able to explain risk to non-technical people and push back when needed.
• Experience leading or building a team is a plus, but not required.
• Nice to have: biometric or video privacy experience, physical security or IoT hardware, CISSP/CISM/CISA/OSCP.
• Able to work on-site in the Bay Area.

Responsibilities

• Own our compliance programmes end to end, starting with SOC 2 Type II and ISO 27001: controls, evidence, policies, auditors and remediation.
• Lead our path to the frameworks customers ask for most, including NDAA / TAA, HIPAA, CJIS, CMMC, ITAR or FedRAMP, and decide which to certify against and which to answer with documentation.
• Partner with sales on customer security reviews, questionnaires and due-diligence calls, and build a trust centre and reusable answers so deals move faster.
• Own data flows, retention and privacy controls for sensitive video and biometric data, including GDPR, Illinois BIPA and state-by-state retention rules.
• Make compliance real: automate onboarding, offboarding and access reviews, and manage identity, SSO, MFA, device management and endpoint protection.
• Own IT systems and vendors across our US, UK and India offices.
• Work with engineering on security fixes and architecture changes, and lead incident response and customer communication when something goes wrong.
• Build a prioritised security roadmap, report progress to leadership, and hire as the function grows.

Skills

Security leadership

Enterprise sales

Scripting Python

Cloud basics

IaC basics

Identity platforms

Risk communication

Team leadership

Tools

AWS

Terraform

CI/CD tools

Job description

Coram AI is hiring its first Lead Security & Compliance Engineer to own security, IT and compliance. You will manage SOC 2 Type II and ISO 27001 programs, coordinate with sales on reviews, and implement automated controls across our cloud-native platform.

The role involves working with engineering leadership and growing the function on-site in the Bay Area. You will lead data retention, privacy controls, and incident response, while building a scalable roadmap and team as Coram AI expands across