Security & Compliance Lead - SOC 2, ISO 27001, HIPAA-ready

iFrame Corporation; San Francisco (CA); Remote; USD 240,000 - 310,000; Full time

Job summary

iFrame.ai seeks a senior security leader to own SOC 2 Type II, ISO 27001, and HIPAA-ready posture, with BYOK/HYOK roadmap ownership. You will be the named person on customer security questionnaires and manage the audit calendar.

The role is the first dedicated security hire, reporting to the founder, with budget for an external auditor and a fractional vCISO if needed. Expect collaboration with runtime and cluster teams to advance KMS/HSM strategies.

Qualifications

• Seven-plus years in security and compliance at a cloud/SaaS/infrastructure company.
• Operational experience running an ISMS — ISO 27001 certified or one cert away.
• Real understanding of cloud-infra security primitives (KMS/HSM, roots of trust, network segmentation, IDS/IPS, vulnerability mgmt).

Responsibilities

• Run the annual SOC 2 Type II audit — scoping, evidence collection, control testing, report delivery.
• Drive ISO 27001 certification end-to-end (SoA, ISMS, internal audit, certification body).
• Maintain HIPAA-ready posture and the BAA program; keep a healthcare customer list.
• Ship BYOK then HYOK on the platform with runtime and cluster teams; own the customer-facing key-management story.
• Own customer security questionnaires and pre-sales reviews (CAIQ v4, SIG, custom).
• Handle incident response, breach-notification clock, and post-mortem write-ups for security incidents.

Skills

SOC 2 Type II

ISO 27001

HIPAA

Cloud security

Job description

iFrame.ai seeks a senior security leader to own SOC 2 Type II, ISO 27001, and HIPAA-ready posture, with BYOK/HYOK roadmap ownership. You will be the named person on customer security questionnaires and manage the audit calendar.

The role is the first dedicated security hire, reporting to the founder, with budget for an external auditor and a fractional vCISO if needed. Expect collaboration with runtime and cluster teams to advance KMS/HSM strategies.