Security & Compliance Program Lead

Endex; Denver (CO); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health & Dental Insurance

Monthly Wellness Stipend

401K Matching

Job summary

Endex is hiring a Security and Compliance Manager to own the assurance program and drive audit readiness across cloud/SaaS environments. You will coordinate evidence, controls and customer commitments, working with security engineers and legal teams.

The role emphasizes practical governance, risk tracking and clear communication with customers and auditors. Based in the US with in-person responsibilities in multiple cities, including Denver.

Qualifications

• Experience assessing controls in a cloud or SaaS environment.
• Ability to discuss access, infrastructure and development controls with engineers.
• Prioritize gaps based on risk and operational context.
• Evaluate evidence quality and ensure it supports the claim.
• Connect policy requirements to operating controls and explain results to customers or auditors.

Responsibilities

• Own the Assurance Program: Maintain policies, controls and evidence for audit frameworks and customer commitments Endex chooses to support.
• Run Audit Readiness: Coordinate evidence collection, control testing, risk assessments and remediation with clear owners and deadlines.
• Support Customer Trust: Own security diligence and questionnaire workflows, verifying answers with technical and legal owners.
• Build Practical Governance: Coordinate access reviews, training, vendor risk and incident-readiness work, including AI-related risks where relevant.
• Track Risk and Follow-Through: Maintain an actionable risk register and report progress on control gaps and security commitments.

Skills

Security compliance

Technical understanding

Risk prioritization

Evidence evaluation

Auditor communication

Job description

Endex is hiring a Security and Compliance Manager to own the assurance program and drive audit readiness across cloud/SaaS environments. You will coordinate evidence, controls and customer commitments, working with security engineers and legal teams.

The role emphasizes practical governance, risk tracking and clear communication with customers and auditors. Based in the US with in-person responsibilities in multiple cities, including Denver.