Senior Security & Compliance Lead (Remote)

Georgian; United States; Remote; USD 151,000 - 178,000; Full time

Benefits offered by this job

Remote‑First culture

Stock options

100% Health insurance

Flexible time off

Parental leave

Job summary

Chainguard is building the secure foundation for software development and deployment. We are hiring a senior practitioner to lead compliance and trust, run external examinations, and own third‑party risk management.

You will manage auditor relationships and drive evidence‑based strategies across a distributed team. You will work on policy‑as‑code, evidence from identity and cloud systems, and oversee customer diligences to protect critical customers.

Qualifications

• Experience leading external examinations (SOC 2, ISO 27001) and coordinating audits.
• Fluent in customer security diligence and regulator inquiries.
• Strong vendor risk management and cross‑functional collaboration.
• Ability to define evidence requirements and maintain an auditor relationship.

Responsibilities

• Run external examinations end to end: calendar, requests, sample fulfilment, auditor calls, readiness ahead of cycles.
• Build relationships with People, IT, Infrastructure, Engineering, Legal and Sales to evidence data and remediation.
• Own customer security diligence, questionnaires, audits, and Trust Center content.
• Own the third‑party risk program: vendor intake, assessments, and supplier register.
• Define questionnaire responder and vendor triage agent requirements; maintain answer banks.
• Turn recurring patterns into self‑serve artifacts and control improvements.
• Maintain a unified controls catalog across frameworks and push defects back to governance.
• Produce remediation findings that survive re‑test; drive corrective actions.
• Guide public‑sector compliance analyst work with the Head of Governance & Trust.
• Own outcomes reporting to the CISO and mentor the team.
• Lead and mentor junior practitioners and build a scalable team.

Skills

SOC 2

ISO 27001

Auditor liaison

Vendor risk

Security questionnaires

Risk management

Git

Job description

Chainguard is building the secure foundation for software development and deployment. We are hiring a senior practitioner to lead compliance and trust, run external examinations, and own third‑party risk management.

You will manage auditor relationships and drive evidence‑based strategies across a distributed team. You will work on policy‑as‑code, evidence from identity and cloud systems, and oversee customer diligences to protect critical customers.