Senior Security Compliance Lead — Remote | Equity Options

Chainguard; United States; Remote; USD 151,000 - 178,000; Full time

Benefits offered by this job

Flexible & Remote-First Culture

Equity with 10-year exercise window

100% Covered Health Insurance

Flexible Time Off

18 weeks parental leave

Job summary

Chainguard is seeking a Senior Compliance & Trust practitioner to lead external examinations (SOC 2, ISO 27001, Cyber Essentials) and third‑party risk management. You will own customer due diligence, coordinate with global teams, and shape evidence programs that scale as the company grows.

You’ll define the evidence pipelines, manage auditor relationships, and drive remediation across a distributed US/UK/EU environment. Competitive base salary and strong equity accompany the role.

Responsibilities

• Run external examinations end to end: manage evidence calendar, requests, sample fulfilment, auditor calls, and readiness assessments.
• Build and maintain relationships with People, IT, Infrastructure, Engineering, Legal, and Sales to evidence, populations, and remediation.
• Own customer security diligence: security questionnaires, customer audits, Trust Center content, and multi‑round assessments.
• Own vendor risk program: vendor intake, tiering, assessments, dispositions, and the register of critical suppliers.
• Define questionnaire responders and vendor triage agents' roles; maintain the validated answer bank; judge outputs.
• Turn recurring patterns into standing artifacts, self‑serve packages, and control improvements.
• Use a single controls catalog across frameworks; push mapping defects back to governance.
• Produce findings and remediation evidence that survive external re‑tests.
• Guide the public‑sector compliance analyst’s work on assessor relationships and customer diligence.
• Own outcomes reported to the CISO: what closed, what slipped, and at what cost.
• Mentor analysts and help build the team as it grows.

Job description

Chainguard is seeking a Senior Compliance & Trust practitioner to lead external examinations (SOC 2, ISO 27001, Cyber Essentials) and third‑party risk management. You will own customer due diligence, coordinate with global teams, and shape evidence programs that scale as the company grows.

You’ll define the evidence pipelines, manage auditor relationships, and drive remediation across a distributed US/UK/EU environment. Competitive base salary and strong equity accompany the role.