Security Compliance Lead

Job Summary

As the single accountable owner of Plaid's core security compliance program, the full-time remote Security Compliance Lead will manage SOC 2 Type 2, ISO 27001, and ISO 27701 compliance, ensuring effective governance and internal audits while leveraging AI and automation to scale processes.

Key responsibilities

• Own the compliance program and governance calendar, leading SOC 2 Type 2 and ISO certifications and ensuring timely completion of governance obligations
• Build and maintain a control catalog mapped across multiple frameworks, ensuring clear ownership and testing of controls
• Run internal audits and policy assurance, developing risk-based plans and tracking findings to remediation

Required qualifications

• Proven experience as the accountable owner of SOC 2 Type 2 and ISO 27001/27701 programs through multiple audit cycles
• Hands-on experience with FedRAMP, including NIST 800-53 control implementation and continuous monitoring
• Experience planning and executing risk-based internal audits and collaborating with Finance on ITGCs and SOX
• Demonstrated ability to embed compliance into product development in partnership with Product and Engineering teams
• Fluency in AI applications and automation in compliance processes