Security & Trust Lead

Job Summary

As the first dedicated Security & Trust Lead in a full-time remote capacity, the successful candidate will manage and automate the governance, risk, and compliance (GRC) program, oversee customer data security, and ensure effective communication of trustworthiness to customers.

Key responsibilities

• Run and automate the GRC program, leading SOC 2 audits and managing vendor reviews
• Own the processes for customer data movement and deletion requests across analytics tools
• Coordinate product security audits and investigate security incidents

Required qualifications

• 5+ years of experience in building Security & Trust programs, ideally in a company with 50-300 employees
• Technical knowledge of SSO/IAM configurations and data flow management
• Proven ability to automate processes using scripts, APIs, and AI tools
• Experience in running employee security programs, including training and phishing simulations
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, and HIPAA