Security & Compliance Lead

Role overview Keep the platform's certifications continuously audit-ready and stay ahead of the enterprise security questionnaire. This is a hands-on security and compliance leadership role focused on practical risk reduction, not just documentation, while preparing the ground for emerging federal requirements.

Responsibilities - Maintain ongoing readiness for SOC 2 Type II, GDPR, and CCPA across the organization. - Own responses to enterprise security questionnaires and client risk reviews. - Harden encryption, access control, and audit posture across the platform. - Prepare the compliance foundation for federal requirements as a new public-sector channel opens.

Requirements - Hands-on compliance leadership experience through real audits, not just policy writing. - Track record of answering institutional security due diligence from enterprise customers. - Pragmatic judgment about what actually reduces risk versus what only documents it.

Nice to have - Familiarity with federal compliance frameworks such as FedRAMP, CMMC, or GovCon procurement. - Experience scaling security programs in fast-growing product organizations.