Security & Privacy Compliance Engineer

LangChain; San Francisco (CA); On-site; USD 153,000 - 215,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Flexible vacation

401(k) plan

Meals on in-office days (US)

Job summary

LangChain is seeking a Privacy & Security Compliance Lead to build and scale our privacy program. You’ll own SOC 2, ISO 27001, ISO 27701, and privacy frameworks across cloud environments, deployments, and geographies. This in-person role is based in San Francisco or New York.

Work with Engineering, Legal, and product teams to embed controls, drive audits, and secure customer trust. 5+ years in privacy or security compliance, DPAs/BAAs, and strong writing are essential.

Qualifications

• 5+ years in privacy, GRC, or security compliance.
• Experience with GDPR, HIPAA, CCPA, ISO 27001/27701, SOC 2.
• Experience with DPAs and BAAs in commercial contexts.
• Technical ability to read code and validate data flows.
• Strong writing to produce policies and questionnaires.

Responsibilities

• Build and automate our compliance operations layer with evidence pipelines.
• Collaborate with Engineering to embed privacy controls into products.
• Maintain and scale SOC 2, ISO 27001, ISO 27701, HIPAA, GDPR, CCPA programs.
• Partner with Legal on DPAs/BAAs and vendor terms.
• Monitor contractual obligations across signed agreements.
• Contribute to customer trust materials and security questionnaires.
• Support vendor privacy risk assessments during onboarding and renewals.

Skills

Privacy & GRC

Security compliance

DPAs & BAAs management

Technical fluency

Strong writing

Tools

Python

Job description

LangChain is seeking a Privacy & Security Compliance Lead to build and scale our privacy program. You’ll own SOC 2, ISO 27001, ISO 27701, and privacy frameworks across cloud environments, deployments, and geographies. This in-person role is based in San Francisco or New York.

Work with Engineering, Legal, and product teams to embed controls, drive audits, and secure customer trust. 5+ years in privacy or security compliance, DPAs/BAAs, and strong writing are essential.