Security & Privacy Lead for SaaS & Compliance

Code and Theory, LLC; United States; Remote; USD 140,000 - 175,000; Full time

Job summary

Code and Theory is seeking an Associate Director, Security & Compliance to lead security, privacy, and compliance for our SaaS products and client projects. You will own this capability end to end, from new business through implementation, certification, and ongoing monitoring.

You will implement audit readiness, privacy controls, and security tooling, partnering with delivery teams across time zones to embed risk-aware practices into every engagement and maintain trust with clients and the

Qualifications

• 8+ years in information security leadership in SaaS or professional services.
• Proven ownership of SOC 2 Type II and ISO 27001 programs.
• Strong privacy program knowledge including HIPAA, GDPR, CPRA.
• Experience embedding security and privacy into delivery workflows.
• Excellent cross-team communication with auditors and clients.

Responsibilities

• Lead our security program across SaaS products and client projects, setting strategy, priorities, and measurable outcomes
• Lead SOC 2 Type II, ISO 27001, and ISO 42001 readiness and ongoing compliance, including control design, evidence processes, and auditor coordination
• Lead privacy governance and operational practices, ensuring compliance with applicable requirements
• Partner with delivery teams to embed security and privacy into how we build, with clear expectations and review gates
• Establish a repeatable client engagement security plan for client work
• Lead vendor security reviews and remediation tracking
• Support customer assurance efforts including security questionnaires and RFPs
• Maintain an incident response program and drive post incident improvements
• Build a security and privacy culture through guidance and training

Skills

Security leadership

SOC 2 Type II

ISO 27001

Privacy by design

HIPAA GDPR CPRA

ISMS governance

Auditor coordination

Cloud security fundamentals

Security program leadership

Tools

GCP

AWS

Azure

Vanta/Drata

Job description

Code and Theory is seeking an Associate Director, Security & Compliance to lead security, privacy, and compliance for our SaaS products and client projects. You will own this capability end to end, from new business through implementation, certification, and ongoing monitoring.

You will implement audit readiness, privacy controls, and security tooling, partnering with delivery teams across time zones to embed risk-aware practices into every engagement and maintain trust with clients and the