Security GRC Lead - AI-Driven Compliance & Audits

Plaid Inc.; Seattle, Raleigh, San Francisco, New York (WA, NC, CA, NY); Vor Ort; USD 140.000 - 200.000; Vollzeit

Zusammenfassung

Plaid is seeking a Security Compliance Lead to own Plaid's core security compliance program, including SOC 2 Type 2, ISO 27001, and ISO 27701. You will partner across product, engineering, and risk functions to ensure certifications stay reliable and on time as the business grows.

You'll design the program structure, roadmaps, KPI-driven governance, and a control catalog that supports audits, with AI and automation to scale efforts without headcount growth.

Qualifikationen

• Accountable owner of SOC 2 Type 2 and ISO 27001/27701 programs through multiple audit cycles.
• Experience building a common control framework mapped across multiple frameworks.
• Hands-on FedRAMP experience.
• Experience with ITGCs and SOX via internal audits and risk assessment.

Aufgaben

• Own the compliance program and governance calendar, ensuring timely completion of audits and policy reviews.
• Build and maintain a comprehensive control catalog mapped to FedRAMP and NIST standards.
• Run internal audits, manage policy lifecycle, and coordinate remediation with Finance and IT teams.
• Define mature program KPIs, roadmaps, and quarterly reporting to security leadership.

Kenntnisse

SOC 2 Type 2

ISO 27001

FedRAMP

Audit & controls

AI automation

Tools

NIST 800-53

SSP documentation

Jobbeschreibung

Plaid is seeking a Security Compliance Lead to own Plaid's core security compliance program, including SOC 2 Type 2, ISO 27001, and ISO 27701. You will partner across product, engineering, and risk functions to ensure certifications stay reliable and on time as the business grows.

You'll design the program structure, roadmaps, KPI-driven governance, and a control catalog that supports audits, with AI and automation to scale efforts without headcount growth.