Security & Compliance Leader — AI-Driven GRC

Klaviyo; Boston (MA); On-site; USD 140,000 - 210,000; Full time

Job summary

Klaviyo in Boston, MA, seeks a Lead Security Trust & Compliance Engineer to own audits, policies, and risk management across trust programs. You will design controls, guide teams, and raise the technical bar for information security across a leading SaaS platform.

The role emphasizes collaboration with auditors, implementation of scalable evidence pipelines, and AI-driven automation. Travel up to 10% may be required; compensation reflects US market ranges for senior security roles.

Qualifications

• Extensive experience owning security and privacy audit programs end to end.
• Ability to interface with internal and external auditors through scoping and findings resolution.
• Write precise policies and standards with testable requirements and exception processes.
• Design and monitor modern security controls and diagnose deficiencies from systems and code.
• Develop GRC–engineering solutions and apply automation to reduce toil.

Responsibilities

• Own internal and external audits from scoping to evidence delivery; serve as primary auditor contact.
• Define gaps vs. frameworks and drive certification or regulation implementation.
• Own security policies and standards end to end; maintain hierarchy and testability.
• Determine control design for net-new controls and guide partner teams.
• Define control health metrics and pipelines to make health signals live.
• Automate security workflows: testing, monitoring, evidence collection, identity governance.

Skills

GRC engineering

Security automation

Audit management

AI automation

AWS

Kubernetes

Policy design

Threat modeling

Education

CISA

CISSP

CCSP

Tools

AWS

Kubernetes

REST APIs

Python

Job description

Klaviyo in Boston, MA, seeks a Lead Security Trust & Compliance Engineer to own audits, policies, and risk management across trust programs. You will design controls, guide teams, and raise the technical bar for information security across a leading SaaS platform.

The role emphasizes collaboration with auditors, implementation of scalable evidence pipelines, and AI-driven automation. Travel up to 10% may be required; compensation reflects US market ranges for senior security roles.