Security Trust & Compliance Lead

Socket.dev; Boston (MA); On-site; USD 140,000 - 210,000; Full time

Job summary

Klaviyo in Boston, MA is seeking a Lead Security Trust & Compliance Engineer to own audits, continuous control monitoring, policy management, and security education for our AI-first B2C platform. You will set strategy, guide teams, and raise the bar for security across our SaaS ecosystem.

You will work with auditors, design controls, automate workflows, and mentor analysts while shaping risk management in a fast-growing company that values ownership and collaboration.

Qualifications

• Experience owning security and privacy audit programs end to end.
• Policy writing that is precise and actionable for engineers.
• Ability to identify gaps against frameworks and define remediation strategies.
• Deep experience designing and monitoring modern security controls.
• Experience with GRC engineering and security automation, including AI applications.
• Knowledge of cloud infrastructure (AWS) and containerization (Kubernetes).
• Experience owning programs against KPIs and SLAs.
• Mentoring practitioners and driving technical direction without formal authority.
• Excellent interpersonal and communication skills.

Responsibilities

• Own internal and external audits end to end and coordinate with auditors.
• Define strategy to close framework gaps and drive implementation for new certifications.
• Own security policies and standards end to end and manage testing requirements.
• Define control design details and guide partner teams on best practices.
• Define control health metrics and build data pipelines for live signals.
• Automate trust workflows: testing, monitoring, evidence collection, identity governance.
• Identify risks and opportunities and propose plans to address them.

Skills

Security audits

Policy design

Risk analysis

GRC engineering

Automation

AWS

Kubernetes

Communication

Mentoring

Tools

None

Job description

Klaviyo in Boston, MA is seeking a Lead Security Trust & Compliance Engineer to own audits, continuous control monitoring, policy management, and security education for our AI-first B2C platform. You will set strategy, guide teams, and raise the bar for security across our SaaS ecosystem.

You will work with auditors, design controls, automate workflows, and mentor analysts while shaping risk management in a fast-growing company that values ownership and collaboration.