Lead Security & Compliance Engineer

Coram AI; Sunnyvale (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Coram AI is hiring its first Lead Security & Compliance Engineer to own security, IT and compliance across the company. You will lead audits, certifications and security reviews for customers from government to Fortune 500, and automate controls across our cloud-based platform.

You’ll partner with engineering leadership, start hands-on, and can grow the function into a larger team as Coram AI expands in the US, UK and Canada.

Qualifications

• 8+ years in security, compliance or IT, with ownership of a security and compliance programme at a B2B startup or scale-up.
• Led a SOC 2 Type II audit, plus at least one additional framework such as ISO 27001, HIPAA, CJIS, CMMC, ITAR or FedRAMP.
• Experience selling into enterprise, government, law enforcement, defence or healthcare and collaborating with sales on security reviews.
• Technical ability to work with engineers: Python or Bash scripting, cloud andIaC basics, identity platforms and device management.
• Capable of executing detailed work from questionnaires to policies while keeping the big picture in mind.
• Able to explain risk to non-technical stakeholders and push back when needed.
• Leadership or building a team is a plus, not required.
• Nice to have: biometric or video privacy experience, physical security or IoT hardware background, CISSP/CISM/CISA/OSCP.

Responsibilities

• Own our compliance programmes end to end, starting with SOC 2 Type II and ISO 27001 with controls, evidence, policies and remediation.
• Lead frameworks like NDAA/TAA, HIPAA, CJIS, CMMC, ITAR or FedRAMP and decide certification scope.
• Partner with sales on security reviews and due-diligence, creating a trust centre for faster deals.
• Manage data flows, retention and privacy controls for video and biometric data, including GDPR and state rules.
• Automate onboarding, offboarding and access reviews; manage identity, SSO, MFA and endpoint protection.
• Oversee IT systems and vendors across US, UK and India offices; coordinate security fixes and architecture changes.
• Lead incident response and customer communications when incidents occur.
• Build a prioritised security roadmap and report progress; hire as the function grows.

Skills

SOC 2 Type II

ISO 27001

HIPAA

CJIS

CMMC

ITAR

FedRAMP

Python

Bash

IaC basics

Identity platforms

Cloud security

Security leadership

Team building

CISSP

CISM

CISA

OSCP

Biometric privacy

Video privacy

Job description

Coram AI is hiring its first Lead Security & Compliance Engineer to own security, IT and compliance across the company. You will lead audits, certifications and security reviews for customers from government to Fortune 500, and automate controls across our cloud-based platform.

You’ll partner with engineering leadership, start hands-on, and can grow the function into a larger team as Coram AI expands in the US, UK and Canada.