Security Compliance & Trust Lead

Klaviyo; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

Klaviyo is seeking a Lead Security Trust & Compliance Engineer to own multiple programs, including compliance operations and audits, continuous control monitoring, and policy standards. You will lead audits end to end, design controls, and mentor analysts while advancing security across modern SaaS architectures.

This role requires expertise in security/privacy frameworks, audit management, policy writing, and automation, with a focus on reducing toil through AI-powered tooling and scalable

Qualifications

• Deep knowledge of multiple security and privacy frameworks and ability to map gaps to new frameworks.
• Experience owning audit programs end to end and interfacing with auditors.
• Policy/standards writing with clear ownership and exception processes.
• Experience with GRC engineering and security automation, including AI applications.

Responsibilities

• Own internal and external audits end to end from scoping to evidence delivery.
• Define strategy to close framework gaps and drive certification projects.
• Author and maintain policy/standards hierarchy and map to frameworks.
• Define control health metrics and build live signal pipelines.
• Automate security workflows with self-service experiences and new tooling.

Skills

Security governance

Audit management

Policy writing

AI automation

AWS

Kubernetes

GRC engineering

Risk analysis

Security operations

Information security

Education

CISA certification

CISSP certification

CCSP certification

Tools

Terraform

OPA/Rego

Conftest

Job description

Klaviyo is seeking a Lead Security Trust & Compliance Engineer to own multiple programs, including compliance operations and audits, continuous control monitoring, and policy standards. You will lead audits end to end, design controls, and mentor analysts while advancing security across modern SaaS architectures.

This role requires expertise in security/privacy frameworks, audit management, policy writing, and automation, with a focus on reducing toil through AI-powered tooling and scalable