Security & Compliance Lead for AI Video Security

Coram-Ai; Sunnyvale (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Coram AI is seeking a Lead Security & Compliance Engineer to own security, IT and compliance across the organization. Based on-site in the Bay Area, you will manage SOC 2 Type II, ISO 27001, and other frameworks, partnering with sales during security reviews to accelerate deals.

You’ll automate onboarding, offboarding, and access reviews, guide privacy controls for video/biometric data, and shape a security roadmap as the team grows.

Qualifications

• 8+ years in security, compliance or IT, with ownership of a security and compliance programme at a B2B startup or scale-up.
• Personally led a SOC 2 Type II audit, plus at least one more framework such as ISO 27001, HIPAA, CJIS, CMMC, ITAR or FedRAMP.
• Experience selling into enterprise, government, law enforcement, defence or healthcare customers, and working closely with sales on security reviews.
• Technical enough to work credibly with engineers: scripting (Python or Bash), cloud and infrastructure-as-code basics, identity platforms and device management.
• Comfortable doing the detailed work yourself, from questionnaires to policies, while keeping the bigger picture in mind.
• Able to explain risk clearly to non-technical people, and to push back on sales or leadership when it matters.
• Experience leading or building a team is a plus, but not required.
• Nice to have: biometric or video privacy experience, physical security or IoT hardware background, and certifications such as CISSP, CISM, CISA or OSCP.

Responsibilities

• Own our compliance programmes end to end, starting with SOC 2 Type II and ISO 27001: controls, evidence, policies, auditors and remediation.
• Lead our path to frameworks customers ask for most, including NDAA / TAA, HIPAA, CJIS, CMMC, ITAR and FedRAMP, and decide which to certify against and which to answer with documentation.
• Partner with sales on customer security reviews, questionnaires and due-diligence calls, and build a trust centre and reusable answers so deals move faster.
• Own data flows, retention and privacy controls for sensitive video and biometric data, including GDPR, Illinois BIPA and state-by-state retention rules.
• Make compliance real: automate onboarding, offboarding and access reviews, and manage identity, SSO, MFA, device management and endpoint protection.
• Own IT systems and vendors across our US, UK and India offices.
• Work with engineering on security fixes and architecture changes, and lead incident response and customer communication when something goes wrong.
• Build a prioritised security roadmap, report progress to leadership, and hire as the function grows.

Skills

SOC 2 Type II

ISO 27001

HIPAA

CJIS

CMMC

FedRAMP

Python

Bash

Cloud & IaC basics

Identity platforms

Device management

Tools

Python

Bash

Cloud

IaC

Identity platforms

Device management

Job description

Coram AI is seeking a Lead Security & Compliance Engineer to own security, IT and compliance across the organization. Based on-site in the Bay Area, you will manage SOC 2 Type II, ISO 27001, and other frameworks, partnering with sales during security reviews to accelerate deals.

You’ll automate onboarding, offboarding, and access reviews, guide privacy controls for video/biometric data, and shape a security roadmap as the team grows.