Security Compliance Lead — AI-Driven GRC & Certifications

Plaid Inc.; Oregon; Híbrido; USD 170.000 - 210.000; Tempo integral

Resumo da vaga

Plaid Inc. seeks a Security Compliance Lead who will own Plaid’s core security compliance program, including SOC 2 Type 2, ISO 27001 and ISO 27701, ensuring audits, evidence collection, and timely governance obligations are met as the business grows.

You’ll define the program’s structure, roadmap, and KPIs, build a unified control catalog, and partner with Product and Engineering to embed compliance into product development through lightweight checkpoints and AI-enabled automation.

Qualificações

• Has been the accountable owner of SOC 2 Type 2 and ISO 27001/27701 programs through multiple audit cycles.
• Has built or rebuilt a common control framework mapped across multiple frameworks.
• Hands-on FedRAMP experience (Rev5 or 20x) with NIST 800-53 controls and continuous monitoring.
• Experience with ITGCs, SOX, and working with auditors on remediation.
• Partnered with Product and Engineering to scope launches into audits and embed compliance checkpoints.

Responsabilidades

• Own the compliance program and governance calendar with defined owners and evidence.
• Build and maintain a cross-framework control catalog with quarterly certifications.
• Run internal audits and policy assurance, tracking findings to remediation.
• Define the program roadmap and KPIs; report progress to security leadership quarterly.
• Embed GRC by design with product roadmaps and infrastructure changes.
• Scale through AI and automation for evidence, testing, and audits.

Conhecimentos

SOC 2 Type 2 ownership

ISO 27001/27701

Internal audit

Policy assurance

ITGC & SOX

FedRAMP experience

GA governance & controls

AI workflows / automation

Descrição da vaga

Plaid Inc. seeks a Security Compliance Lead who will own Plaid’s core security compliance program, including SOC 2 Type 2, ISO 27001 and ISO 27701, ensuring audits, evidence collection, and timely governance obligations are met as the business grows.

You’ll define the program’s structure, roadmap, and KPIs, build a unified control catalog, and partner with Product and Engineering to embed compliance into product development through lightweight checkpoints and AI-enabled automation.