Security Trust & Compliance Leader

Klaviyo Inc.; Boston (MA); Hybrid; USD 140,000 - 210,000; Full time

Job summary

Klaviyo is a fast-growing AI-first B2C CRM platform empowering 176,000+ brands worldwide. As Lead Security Trust & Compliance Engineer, you will own multiple programs, set strategy, run audits end-to-end, and raise the bar for controls and evidence pipelines across the organization.

You will guide control design, write precise policies, and partner with teams to implement robust security practices in a modern SaaS environment.

Qualifications

• In-depth understanding of multiple security frameworks and their application.
• Experience owning security/privacy audit programs end to end.

Responsibilities

• Own internal and external audits end to end from scoping to evidence delivery; be the main contact for auditors.
• Define control health metrics and build pipelines to keep health signals live.
• Automate and streamline security workflows including testing, monitoring, and evidence collection.
• Identify gaps vs frameworks and drive certification or regulation adoption.
• Mentor analysts and guide technical growth within the team.

Skills

NIST CSF 2.0

CIS Controls

ISO 27001

SOC 2

PCI

HIPAA

GDPR/CCPA

Audit management

Security automation

AI in security

Tools

AWS

Kubernetes

Job description

Klaviyo is a fast-growing AI-first B2C CRM platform empowering 176,000+ brands worldwide. As Lead Security Trust & Compliance Engineer, you will own multiple programs, set strategy, run audits end-to-end, and raise the bar for controls and evidence pipelines across the organization.

You will guide control design, write precise policies, and partner with teams to implement robust security practices in a modern SaaS environment.