Senior Governance & Trust Security Lead

Chainguard; United States; Remote; USD 151,000 - 178,000; Full time

Benefits offered by this job

Flexible & Remote-First Culture

Stock options

100% Covered Health Insurance

18 Weeks Paid Parental Leave

Job summary

Chainguard is building the secure foundation for software development and deployment. We are hiring a Staff Security Analyst to lead governance, trust, and external examinations including SOC 2 and ISO 27001, ensuring evidence-driven compliance and customer diligence.

The role focuses on managing auditor relations, risk programs, and cross-functional collaboration across IT, legal, engineering, and sales. Remote-friendly with a globally distributed team and a strong compliance culture.

Qualifications

• Experience leading external audits (SOC 2, ISO 27001) and managing evidence.
• Strong understanding of security controls, frameworks, and attestations.
• Fluent in vendor risk management and customer due diligence processes.

Responsibilities

• Lead end-to-end external examinations, including evidence calendars and auditor communications.
• Build cross-functional relationships to assemble evidence, populations, and remediations.
• Own customer security diligence, questionnaires, audits, and Trust Center content.
• Oversee third-party risk management, vendor intake, tiering, and supplier agreements.
• Define requirements for questionnaire responders and vendor triage agents; validate outputs.

Skills

SOC 2 audits

ISO 27001

Regulatory diligence

Auditor management

Vendor risk management

Job description

Chainguard is building the secure foundation for software development and deployment. We are hiring a Staff Security Analyst to lead governance, trust, and external examinations including SOC 2 and ISO 27001, ensuring evidence-driven compliance and customer diligence.

The role focuses on managing auditor relations, risk programs, and cross-functional collaboration across IT, legal, engineering, and sales. Remote-friendly with a globally distributed team and a strong compliance culture.