Senior Security Engineer — Compliance & AI Risk Lead

UserGems; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

UserGems is seeking a dedicated security lead to own and operate the company’s security program in the United States. You will drive SOC 2 program health, AWS remediation, and customer security reviews, while shaping the ISO 27001 and ISO 42001 roadmaps and maturing AI security governance.

In this role you’ll perform secure code reviews, threat detection, and incident response planning, partnering with the Sr.

Qualifications

• Experience in governance, risk and compliance operations.
• Hands-on AWS remediation and security engineering.
• Strong track record leading SOC 2 / ISO audits.
• Ability to drive ISO 27001 and ISO 42001 programs.
• Proficient in security reviews of AI/LLM systems and secure coding.

Responsibilities

• Own SOC 2 audits and Drata-based remediation.
• Lead ISO 27001 implementation and ISO 42001 readiness.
• Manage customer security questionnaires and enable rapid revenue blockers.
• Perform IAM, S3 settings, secrets hygiene, and audit-trail follow-ups.
• Oversee vulnerability management, threat detection, and incident response.

Job description

UserGems is seeking a dedicated security lead to own and operate the company’s security program in the United States. You will drive SOC 2 program health, AWS remediation, and customer security reviews, while shaping the ISO 27001 and ISO 42001 roadmaps and maturing AI security governance.

In this role you’ll perform secure code reviews, threat detection, and incident response planning, partnering with the Sr.