Security Risk, Assurance & Trust Leader

Socket.dev; Santa Clara (CA); On-site; USD 124,000 - 177,000; Full time

Benefits offered by this job

401k plan

Health, dental, vision

Parental leave

Equity grants

Job summary

SiTime is seeking a senior security risk, assurance and trust leader to build and run the enterprise program reporting to the CISO. You will own customer security audits, third‑party risk, enterprise risk registers, policy and governance, and SOX‑related certifications and controls.

The role is hands‑on at first, delivering the first cycle of each program, then scaling with a mix of full‑time hires and contractors to sustain audit readiness and ongoing improvements across IT, Legal, Finance,

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering or a related field.
• 3+ years of people leadership experience in security/risk programs.
• Hands-on experience delivering audits, certifications, and risk management at scale.

Responsibilities

• Own customer security assurance end to end with reusable trust artifacts (whitepapers, audit reports).
• Drive remediation of gaps identified in customer audits with IT, Engineering, and system owners.
• Lead ISO 27001 certification end to end including scoping, gap assessment, and surveillance.
• Design and operate third‑party and vendor risk management programs (onboarding, tiering, monitoring).
• Establish and govern policy framework, standards, and control baselines with cross‑functional partners.
• Produce recurring risk reporting for executive visibility and Audit Committee updates.

Skills

Security leadership

Risk management

Vendor risk management

Policy & governance

SOX/compliance

Executive communication

Education

Bachelor’s degree in Computer Science, Information Security, Engineering

Tools

Azure

AWS

NIST CSF

ISO 27001

SOX ITGC

Job description

SiTime is seeking a senior security risk, assurance and trust leader to build and run the enterprise program reporting to the CISO. You will own customer security audits, third‑party risk, enterprise risk registers, policy and governance, and SOX‑related certifications and controls.

The role is hands‑on at first, delivering the first cycle of each program, then scaling with a mix of full‑time hires and contractors to sustain audit readiness and ongoing improvements across IT, Legal, Finance,