Lead Security, Trust & Compliance Engineer

Socket.dev; Denver (CO); On-site; USD 140,000 - 210,000; Full time

Job summary

Klaviyo is seeking a Lead Security Trust & Compliance Engineer to own multiple programs, setting strategy and leading audits end to end. You will mentor analysts, define control designs, and raise the technical bar across security domains in a fast-paced SaaS environment.

You will automate workflows, build evidence pipelines, and drive risk analysis, policy management, and compliance initiatives to protect customer data while enabling rapid product development.

Qualifications

• Experience owning security and privacy compliance audit programs end to end.
• Experience writing policies and standards that are precise and testable.
• Experience with GRC engineering and security automation, including AI applications.
• Knowledge of enterprise SaaS apps, cloud infra (AWS, Kubernetes) and modern security tooling.
• Strong communication and mentoring skills with cross-team collaboration.

Responsibilities

• Own internal and external audits end to end, serving as primary liaison for auditors.
• Define strategy to close gaps against new certifications or regulations.
• Own security policies and standards end-to-end and maintain hierarchy.
• Provide technical guidance on control design and diagnose deficiencies in configurations/systems.
• Define control health metrics and build pipelines to monitor them.
• Automate workflows for testing, monitoring, and evidence collection.
• Identify risks and opportunities and propose plans to address them.

Skills

Audit management

Policy writing

GRC engineering

Security automation

Risk analysis

Communication

Mentoring

Stakeholder management

AWS security

Tools

Terraform

OPA/Rego

Conftest

Python

Cloud security

Job description

Klaviyo is seeking a Lead Security Trust & Compliance Engineer to own multiple programs, setting strategy and leading audits end to end. You will mentor analysts, define control designs, and raise the technical bar across security domains in a fast-paced SaaS environment.

You will automate workflows, build evidence pipelines, and drive risk analysis, policy management, and compliance initiatives to protect customer data while enabling rapid product development.