Lead Security & Compliance Engineer: Trust & Automation

Klaviyo; Denver (CO); On-site; USD 140,000 - 210,000; Full time

Job summary

Klaviyo is seeking a Lead Security Trust & Compliance Engineer in the US to own multiple trust and compliance programs, lead audits end-to-end, and raise the technical bar for security controls across SaaS platforms. You’ll design policies, implement controls, and automate workflows while mentoring analysts and guiding cross-functional teams.

Ideal candidates have extensive experience with governance, risk, and compliance in modern SaaS environments, strong collaboration skills, and a proactive

Qualifications

• Deep knowledge of security/privacy frameworks (NIST CSF 2.0, ISO 27001/27002, PCI, GDPR, CCPA).
• Experience owning security/compliance audit programs end-to-end.
• Strong policy/writing skills with testable requirements.

Responsibilities

• Own audits and examinations end to end; be the primary contact for auditors.
• Define strategy to close gaps and drive certifications or regulations.
• Own security policies and standards end-to-end; map to frameworks and requirements.
• Define control designs for net-new controls and guide partner teams.
• Build pipelines to monitor control health as a live signal.
• Automate trust/compliance workflows and improve self-service experiences.
• Identify risks and opportunities and propose actionable plans.

Job description

Klaviyo is seeking a Lead Security Trust & Compliance Engineer in the US to own multiple trust and compliance programs, lead audits end-to-end, and raise the technical bar for security controls across SaaS platforms. You’ll design policies, implement controls, and automate workflows while mentoring analysts and guiding cross-functional teams.

Ideal candidates have extensive experience with governance, risk, and compliance in modern SaaS environments, strong collaboration skills, and a proactive