Security GRC Lead — SOC 2, ISO, FedRAMP, AI

Plaid; United States; On-site; USD 141,000 - 259,000; Full time

Job summary

Plaid is seeking a Security Compliance Lead to own and evolve our core security compliance program, including SOC 2 Type 2, ISO 27001, and ISO 27701. You will shape program direction, define controls, and align audits with product roadmaps.

In this role you’ll drive governance, manage internal audits, and collaborate with Product and Engineering to embed compliance into development while leveraging AI-driven automation to streamline evidence gathering and testing.

Qualifications

• Accountable owner of SOC 2 Type 2 and ISO 27001/27701 programs through multiple audit cycles, with roadmap and KPIs
• Built or rebuilt a common control framework mapped across multiple frameworks with clear owners and testing
• Hands-on FedRAMP experience (Rev5 or 20x) with NIST 800-53 control implementation, SSP documentation, third-party assessment, and continuous monitoring
• Planned and ran risk-based internal audits testing operating effectiveness and policy adherence, coordinating with finance on ITGCs
• Partnered with Product and Engineering to scope launches and changes into audits, embedding compliance checkpoints into product development
• Built AI-driven automation to reduce manual compliance work and share effective approaches with the team

Responsibilities

• Own the compliance program and governance calendar end to end
• Build and maintain a cross-framework control catalog with clear owners and testing
• Run internal audits and policy assurance, track findings to remediation
• Set direction, roadmap, and KPIs for a mature program and report progress
• Embed GRC into product development and engineering roadmaps
• Scale through AI and automation for evidence, testing, scoping, and audit requests

Skills

SOC 2 ownership

ISO 27001/27701

FedRAMP

Internal audits

Policy assurance

ITGC & SOX

GRC by design

AI automation

Tools

Audit tools

AI workflows

Job description

Plaid is seeking a Security Compliance Lead to own and evolve our core security compliance program, including SOC 2 Type 2, ISO 27001, and ISO 27701. You will shape program direction, define controls, and align audits with product roadmaps.

In this role you’ll drive governance, manage internal audits, and collaborate with Product and Engineering to embed compliance into development while leveraging AI-driven automation to streamline evidence gathering and testing.