Security Compliance Program Lead

Plaid; Seattle (WA); Sur place; USD 141 000 - 259 000; Plein temps

Résumé du poste

Plaid’s Security Governance, Risk, and Compliance (GRC) team leads the enterprise-wide program for SOC 2 Type 2, ISO 27001, ISO 27701, and related governance. As Security Compliance Lead, you own the program, define the control catalog, drive audits, and partner with Product and Engineering to embed compliance into roadmaps.

You’ll scale with AI and automation, manage internal audits, and ensure timely certifications as Plaid expands into new products and markets, working with regulators and

Qualifications

• Has owned SOC 2 Type 2 and ISO 27001/27701 programs through multiple audits.
• Hands-on FedRAMP experience (Rev5 or 20x) with NIST 800-53 control implementation and SSPs.
• Experience planning and running risk‑based internal audits and driving findings to remediation.
• Collaborates with Product and Engineering to embed compliance into launches and roadmaps.
• Shows AI-first approach with workflows or automations that reduce manual work.

Responsabilités

• Own the compliance program and governance calendar end to end.
• Build and maintain a single control catalog mapped across multiple frameworks.
• Run internal audits and manage policy assurance and ITGC/SOX collaboration.
• Define program maturity, roadmap, and KPIs; report progress quarterly.
• Embed GRC into product development and cross‑functional plans.
• Scale through AI and automation for evidence, testing, scoping, and audits.

Connaissances

Compliance ownership

FedRAMP

Audit management

Product‑aware compliance

AI/automation

Description du poste

Plaid’s Security Governance, Risk, and Compliance (GRC) team leads the enterprise-wide program for SOC 2 Type 2, ISO 27001, ISO 27701, and related governance. As Security Compliance Lead, you own the program, define the control catalog, drive audits, and partner with Product and Engineering to embed compliance into roadmaps.

You’ll scale with AI and automation, manage internal audits, and ensure timely certifications as Plaid expands into new products and markets, working with regulators and