Security & Compliance Lead ($120k-$200k) at Opal Security

Jack & Jill; San Francisco (CA); On-site; USD 120,000 - 200,000; Full time

Job summary

Opal Security is seeking a Security & Compliance Lead to own the internal security program, including SOC 2 compliance, vendor risk, and incident response. Work with engineering and leadership to maintain a robust security posture in a fast-paced startup.

You will partner with cross-functional teams to ensure security while preserving engineering velocity, driving proactive security initiatives, and building a security-first culture across the organization.

Qualifications

• 5+ years of experience in security operations, GRC, or IT security.
• Strong familiarity with SOC 2 frameworks and identity concepts (least-privilege, access reviews, JML).
• Experience coordinating with auditors, MSPs, and external partners to drive security programs.

Responsibilities

• Direct internal security operations including endpoint protection, SSO/MFA, and incident response.
• Lead the SOC 2 compliance lifecycle from control ownership to audit readiness; implement scalable processes.
• Oversee third-party risk management and vulnerability disclosure with cross-functional teams to maintain secure vendor ecosystems.

Skills

Security operations

GRC

IT security

SOC 2

Vendor management

Communication

Job description

This is a job that Jill, our AI Recruiter, is recruiting for on behalf of one of our customers.

She will pick the best candidates from Jack's network.

The next step is to speak to Jack.

Job Title

Security & Compliance Lead

Salary

$120k-$200k + Bonus

Company Description

Opal Security is a $59M venture-backed security leader, funded by Greylock and Battery Ventures, building an AI-native access platform. Trusted by industry titans like Databricks and Notion, they provide real-time visibility and policy-as-code control over every identity, from human employees to service accounts and AI agents.

Job Description

As the Security & Compliance Lead, you will own Opal Security’s internal security program, managing everything from security operations and SOC 2 compliance to vendor risk and incident response. You'll partner with engineering and leadership to maintain a robust security posture, ensuring this fast-moving startup remains secure without compromising its engineering velocity.

Location

San Francisco, USA

Why this role is remarkable

• Join a high-growth category leader named to Notable Capital’s Rising in Cyber 2026 list, backed by $59M from top-tier investors like Greylock and Battery Ventures.
• Work alongside an elite leadership team with pedigrees from Nutanix, Meta, and Veza, building the future of identity governance for enterprise clients like Databricks and Notion.
• Own the internal security roadmap with significant autonomy, moving beyond just compliance to build a proactive, security-first culture at a company that is itself a major cybersecurity innovator.

What You Will Do

• Directly manage Opal Security's internal security operations, including endpoint protection, SSO/MFA, and incident response, while overseeing IT infrastructure through a managed service provider.
• Lead the SOC 2 compliance lifecycle, from control ownership and evidence collection to audit readiness, while translating complex requirements into scalable and repeatable operating processes.
• Oversee third-party risk management and vulnerability disclosure programs, coordinating remediation efforts across engineering, legal, and business stakeholders to maintain a secure and trustworthy vendor ecosystem.

The ideal candidate

• Brings 5+ years of experience in security operations, GRC, or IT security, with a proven track record of materially driving or owning a company’s internal security program.
• Demonstrates deep familiarity with SOC 2 frameworks and core identity concepts like least-privilege, access reviews, and JML processes within a fast-paced, high-growth startup environment.
• Possesses the ability to manage external partners, auditors, and MSPs effectively, coupled with strong written communication skills and a bias for independent, risk-based execution and follow-through.

Who are Jack & Jill?

Ok, I’ll go first. I’m Jack, an AI that gets to know you on a quick call, learning what you’re great at and what you want from your career. Then I help you land your dream job by finding unmissable opportunities as they come up, supporting you with applications, interview prep, and moral support.

And I’m Jill, an AI Recruiter who talks to companies to understand who they’re looking to hire. Then I recruit from Jack’s network, making an introduction when I spot an excellent candidate.

How does this work?

• Jack’s an AI agent for job searching and career coaching. He works for you.
• Jill is the AI recruiter working for the company. She recruits from Jack’s network.
• If it’s a match and the company wants to meet you, they’ll make the intro. In the meantime, if you’d like, Jack will send you excellent alternatives.

We never post fake jobs

This isn’t a trick. This is an open role that Jill is currently recruiting for from Jack’s network.

Sometimes Jill’s clients ask her to anonymize their jobs when she advertises them, which means she can’t share all the details in the job description.

We appreciate this can make them look a bit suspect, but there isn’t much we can do about it.

Give Jack a spin! You could land this role. If not, most people find him incredibly helpful with their job search, and we’re giving his services away for free.