Security Compliance Lead Jobs

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. At Vanta, being an Enterprise SDR is first about hitting targets and driving revenue. It also means joining a community that’s committed to your success and career growth. We believe the future of our sales organization lies with our SDRs, so we invest heavily in enablement and career advancement. You’ll get the training, support and mentorship you need to excel, with a clear path to an Account Executive role. As an Enterprise SDR, you’ll partner with Account Executives, Solutions Engineers, Marketing and channel partners to create pipeline at large organizations (2,000+ employees). You’ll engage senior security, risk and compliance leaders who are under growing pressure from audits, security reviews, third-party risk and AI governance. You don’t need SaaS or cybersecurity experience to be great at this job. We’ll teach you the product, the tools and the process. What we can’t teach is drive, curiosity and coachability, and that’s what we’re hiring for. Great SDRs come from everywhere: commission- or tip-based roles, hospitality, retail, call centers, fundraising, recruiting, real estate, political campaigns, competitive athletics, or something they started on their own. Vanta is growing quickly and is profitable. We keep beating our growth targets while maintaining very strong NPS scores, so it’s an exciting time to join. If you’re hungry to learn and ready to work hard, we’d love to hear from you. What you’ll do as a Sales Development Representative at Vanta: Learn Vanta’s value proposition and Trust Management Platform, including compliance automation, continuous monitoring, Trust Center, questionnaire automation, vendor ris

ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F , led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products. THE ROLE We are seeking an experienced and detail-oriented GRC (Governance, Risk, and Compliance) Manager to build, support, and continuously enhance Baseten’s security governance, compliance, and privacy programs. As one of the early members of our security organization, you will play a key role in ensuring our platform meets and exceeds the highest standards for privacy, trust, and regulatory compliance. You’ll work closely with Engineering, Product, Security, and Legal to define compliance requirements, assess platform capabilities, and drive implementation from initial scoping through validation. You will also lead customer assurance efforts, helping customers understand our security architecture and compliance posture while bringing their requirements back into product planning. Alongside this product focus, you’ll contribute to Baseten’s broader GRC program, including governance, risk management, audits, vendor assessments, and security awareness. RESPONSIBILITIES Product Compliance: Translate regulatory, framework, and customer requirements into clear product requirements and technical controls, partnering with Engineering and Product to build compliance into platform design and development. Governance & Policy Development: Design, implement, and maintain security governance frameworks, policies, and procedures that align with Baseten’s risk posture and industry best practices. Risk Management: Build and manag

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. Snowflake is growing and looking for a driven IT Audit Senior to join our team. You will report to the Manager, IT Internal Audit and help with an evolving workload with minimal supervision in a fast-paced environment. Whether it is facilitating Snowflake’s SOX compliance efforts or conducting internal audits, we strive to enhance the effectiveness, efficiency and scalability of the company’s processes, systems, and underlying internal control environment. You will be expected to problem solve, collaborate, and move fast while keeping attention to detail. Responsibilities: Execute and support our IT internal controls assessments, other IT audits and investigations. Design and implement automated, data-driven audit procedures using SQL, Python, or AI coding tools like Cortex Code (in Snowflake) move toward real-time monitoring of security compliance. Partner with Engineering and Product teams to audit secure software development lifecycles (SDLC) and CI/CD pipeline security. Conduct internal compliance review, ensuring adherence to frameworks like ISO 27001, ISO 42001, ISO 22301, or ISO 27017. Lead audits of cloud infrastructure (AWS, Azure, GCP) focusing on identity and access management (IAM), encryption, and network security configurations rather than just general IT cont

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role As Head of Regulated Industries – Customer Success at Anthropic, you'll lead the Success teams responsible for our most complex Financial Services (FSI) and Healthcare & Life Sciences (HCLS) customers. Think banks, insurers, asset and wealth managers and financial data providers; health systems, hospitals and payers; and pharmaceutical, biotech and life-sciences organizations. You'll directly coach and develop a team of Customer Success Managers who drive value across the full product portfolio (Claude Platform, Claude Code, Claude Cowork). These are organizations where deployment runs through compliance, procurement, security review, model risk and legal before it reaches an end user. You'll partner day to day with the Regulated Industries sales organization so that customers experience one Anthropic from first conversation to production. You'll turn what works at one regulated customer into a methodology that works at the next. That means success plans that anticipate the governance gates. Executive programs that reach the CIO, CISO, CRO and compliance leaders who decide whether Claude gets deployed. Expansion plays that survive long procurement cycles. You’ll inherit a partially formed team, spanning individual contributors and managers. You'll hire and run the initial team yourself. As the book expands you'll continue to add managers underneath you and manage through them. We're looking for someone who has already led a success business in regulated environments and wants to build the operating model that lets it scale. Responsibilities: Directly manage and develop a team of Customer Success Managers covering Fi

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange™️ platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 160+ public exchanges globally and thousands of private exchanges at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Senior Enterprise Applications Administrator to join our team. This is a hybrid role in San Jose, CA or Remote in Denver, CO, reporting to the Collaboration Solutions Manager in the IT Digital Employee Experience department. In this position, you will support and assist in driving the visionary innovation of Zscaler over the next decade, shaping the future of our technology across collaboration applications and the emerging AI space. You will work closely with support and executive support teams while leading a team to deliver cutting-edge services into both enterprise and FedRAMP environments. What you’ll do (Role Expectations) Develop and articulate the strategic vision for Google Workspace and MS365, aligning with organizational goals and industry best practices, while collaborating with our compliance team on FedRAMP compliance Lead the design, implementation, and optimization of Goog

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Senior Enterprise Platforms & AI Systems Engineer to join our team. This is a hybrid role in San Jose, CA or Remote in Denver, CO, reporting to the Collaboration Solutions Manager in the IT Digital Employee Experience department. In this position, you will support and assist in driving the visionary innovation of Zscaler over the next decade, shaping the future of our technology across collaboration applications and the emerging AI space. You will work closely with support and executive support teams while leading a team to deliver cutting-edge services into both enterprise and FedRAMP environments. What you’ll do (Role Expectations) Develop and articulate the strategic vision for Google Workspace and MS365, aligning with organizational goals and industry best practices, while collaborating with our compliance team on FedRAMP compliance Lead the design, implementation, and optimization o

About Flexport: At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes—from emerging brands to Fortune 500s—use Flexport technology to move more than $19B of merchandise across 112 countries a year. The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us. The Opportunity: Flexport IT is looking for a Senior IT Systems Engineer to support our SaaS based Collaboration and Endpoint Management platforms. In this role, you will be responsible for the configuration, integration, administration, and support of Google Workspace, Slack, Office365, Confluence, Jira, Okta, Jamf, and Intune. You will play a critical role in ensuring these platforms are secure, scalable, and optimized. The candidate will have broad knowledge across IT as a whole, in-depth hands on working knowledge, and a strong security mindset. Your expertise will be critical in automating workflows, protecting sensitive systems and data, mitigating security risks, and maintaining compliance. You will work closely with cross-functional teams, lead IT engineering projects, and provide day to day operations support. You Will Administer and provide escalation support for our SaaS platforms. Implement and maintain policies, software deployment, patching, and security compliance for our Mac and Windows endpoints, using Jamf and Intune. Own the lifecycle management across our core collaboration and endpoint management platforms. Develop autom

About Flexport: At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes—from emerging brands to Fortune 500s—use Flexport technology to move more than $19B of merchandise across 112 countries a year. The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us. The Opportunity: Flexport IT is looking for a Senior IT Systems Engineer to support our SaaS based Collaboration and Endpoint Management platforms. In this role, you will be responsible for the configuration, integration, administration, and support of Google Workspace, Slack, Office365, Confluence, Jira, Okta, Jamf, and Intune. You will play a critical role in ensuring these platforms are secure, scalable, and optimized. The candidate will have broad knowledge across IT as a whole, in-depth hands on working knowledge, and a strong security mindset. Your expertise will be critical in automating workflows, protecting sensitive systems and data, mitigating security risks, and maintaining compliance. You will work closely with cross-functional teams, lead IT engineering projects, and provide day to day operations support. You Will Administer and provide escalation support for our SaaS platforms. Implement and maintain policies, software deployment, patching, and security compliance for our Mac and Windows endpoints, using Jamf and Intune. Own the lifecycle management across our core collaboration and endpoint management platforms. Develop autom

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the team Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security commitments. We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view of how well we're meeting them. We're building toward a fundamentally different kind of GRC: one that directs Claude, with the right humans in the loop, to challenge and evidence the performance of controls continuously rather than through periodic audits. Responsibilities: Serve as the security policy partner for AI agent governance, authoring the policies and standards for how agents are built, deployed, operated Define review and approval criteria when an agent may interact with sensitive or regulated data, and which actions require human approval as it relates to compliance frameworks Serve as the GRC reviewer within existing engineering approval workflows Define data governance requirements for agents, including least-privilege access, access reviews, and handling of regulated and sensitive data Monitor agent behavior over time and adapt governance requirements in partnership with cross-functional security, research and engineering teams Map agent security and data controls to AI governance frameworks (e.g., ISO 27001, ISO 42001, EU AI Act), strengthening Anthropic's certification efforts ensuring agent security is auditable Assess and document agent-related security and compliance risks, driving them to resolution with engineering owners Own the policy for agent-related risk acceptances and exceptions, including approval authority, d

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Role As part of the Anthropic security department, the compliance team owns understanding security and AI safety expectations, as established by regulators, customers and (nascent) industry norms (which we also seek to influence). The compliance team uses this understanding to provide direction to internal partners on the priorities of security and safety requirements they must meet. The compliance team assures regulators and customers that those expectations are met by earning security credentials and responding to direct inquiry about Anthropics security program from auditors, customers and partners. This opportunity is unique, as we work to secure today’s most novel and valuable asset types, we must build a new kind of compliance program, assuring the safety of artificial intelligence capabilities. Key responsibilities Understand how Anthropic's security and privacy capabilities across major cloud platforms implement common frameworks (e.g., NIST 800-53, NIST 800-171, ISO 27001, ISO 27701, CSA CCM, and SOC 2). Build scalable data center and hyperscaler processes and documentation systems that will support future expansion to additional geographies and compliance frameworks. Assess and mitigate security and operational risks, implementing corrective actions, and managing vendor compliance. Coordinate engagements with independent assessors to earn security and privacy certifications and attestations important to Anthropic customers and enterprise partnerships, and to meet regulatory obligations. Write, update and enact policies capturing security, privacy, and AI safety requirements. Maintain and enhance Anthropic's s

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security and control commitments. We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view of how well we're meeting them. We're building toward continuous assurance, to challenge and evidence the performance of controls continuously rather than through periodic audits. As Anthropic scales to meet public-company standards, the Sarbanes-Oxley (SOX) control environment over our technology stack is one of the most consequential things this team owns. As part of Security GRC's technical controls assurance function, you will be the voice on what the IT general controls must achieve to support SOX 404 compliance. In partnership with Internal Audit, you will define control requirements and acceptance criteria for the in-scope engineering systems and infrastructure that underpin financial reporting. You will pair with engineering as they design and implement against those requirements, and validate that what ships actually meets the bar before Internal Audit and our external auditors test it. You are the product owner for control design methodology and continuous control monitoring, initially around ITGCs, but extending into other areas of security and compliance to drive visibility where and when we need it. Key responsibilities Define control requirements and acceptance criteria across the core ITGC domains of logical access, change management, computer operations, and program development for SOX in-scope systems, in

Gong harnesses the power of AI to transform how revenue teams win. The Gong Revenue AI Operating System unifies data, insights, and workflows into a single, trusted system that observes, guides, and acts alongside the world’s most successful revenue teams. Powered by the Gong Revenue Graph, AI-powered intelligence, specialized agents, and trusted applications, Gong helps more than 5,000 companies around the world deeply understand their teams and customers, automate critical sales workflows, and close more deals with less effort. For more information, visit www.gong.io. At Gong, you will join a company built on innovative products, ambitious goals, and passionate people. We are shaping the future of revenue intelligence and we want people who are excited to build what comes next. You will work with a team that dreams big, moves fast, and cares deeply about the craft and about each other. Here, transparency and trust are core to how we operate, and every person has the opportunity to make a visible impact. If you want to grow, stretch, and do work that truly matters, Gong is the place to do the best work of your career. This is a high-visibility, high-impact role at the center of Gong’s security and compliance story. As our Senior GRC Security Lead, you will be the architect of foundational programs we are building — Gong’s first-ever Common Controls Framework, standing up a formal risk process and register, implementing a GRC tooling ecosystem, and owning the full policy, standards, and exceptions management lifecycle. This is not a role for someone looking to inherit a mature program. It’s a role for a builder — someone who thrives in ambiguity, operates with urgency, and finds energy in creating order from complexity. You will work directly with Legal, Sales, Engineering, Customer Audit teams, and executive stakeholders, and your fingerprints will be visible across everything Gong builds for compliance and trust for years to come. RESPONSIBILITIES Design and imple

MongoDB’s Security Product Management team is seeking a Staff Product Manager to own security, compliance, and public sector product strategy within Atlas for Government (A4G). In this role, you will be a key member of the security product management team, helping make data security a market differentiator that enables MongoDB to win in enterprise and regulated industries. You will lead product strategy and execution for capabilities and programs that support federal compliance requirements and broader regulated-industry needs. You will work across Engineering, Compliance, Legal, Security, and Go-to-Market teams to translate complex regulatory and customer requirements into clear product investments, roadmaps, and outcomes. This role is suited for a candidate who can orchestrate multiple interlinked product areas, own cross-team product and architectural trade-offs, and align senior stakeholders around multi-year bets. You will be expected to identify opportunities and dependencies that cut across team boundaries, bring clarity to ambiguous problem spaces, and establish reusable ways of working that help MongoDB deliver secure, compliant platform capabilities for public sector and other regulated markets. You will partner closely with senior engineering and business leaders to evaluate trade-offs, sequence investments, and bring clarity to decisions that balance customer impact, execution risk, and long-term business value. This role can be based out of of our offices or remotely in the United States. The Federal Risk and Authorization Management Program (FedRAMP) is a US government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. Our FedRAMP program requires that anyone who is accessing customer data or metadata inside the Authorization Boundary be a US Person on US Soil. Responsibilities Security and Compliance Product Strategy Own the public sector compliance roadm

About the Team OpenAI builds powerful AI systems like ChatGPT, the OpenAI API, and enterprise products that serve millions of users across the globe. As we scale, securing our infrastructure, protecting sensitive data, and meeting global compliance standards are essential to our success and societal impact. Security at OpenAI is a cross-cutting function that spans infrastructure, applied engineering, legal, policy, and product. Technical Program Managers (TPMs) play a critical leadership role in aligning teams and delivering execution at scale and this role will be foundational in shaping how we secure OpenAI’s systems, users, and commitments. About the Role We’re seeking a Senior Technical Program Manager to drive cross-functional security, privacy, IT and compliance initiatives at the intersection of infrastructure, product, and policy. You will execute complex programs that reduce internal data access, prevent misuse, and ship security capabilities. You will focus your efforts on the most critical initiatives within Security, crossing the spectrum of insider threat, information security, physical security, and information technology challenges. This role is deeply technical and execution-focused. It requires a structured operator who thrives in ambiguity, partners effectively across boundaries, and applies principled judgment to scale trust, governance, and security across OpenAI’s systems and products. In this role, you will: Drive execution of critical security and compliance programs such as vulnerability management, merger and acquisition security and integration, infrastructure hardening, and datacenter security management. You will need to deeply collaborate on technical architecture and resolve technical problems in partnership with engineering. Partner with IT, Infrastructure, Application, Legal, Privacy, and Security teams to build scalable programs, and deliver critical security outcomes across multiple disciplines, including insider threat, information

MongoDB is seeking a Senior Software Engineer to join the Atlas Clusters Organization. The organization is responsible for building MongoDB Atlas, our database as a service offering and fastest growing product. Atlas allows users to deploy fault-tolerant, secure, globally distributed MongoDB clusters in just minutes. This includes developing software to interface with the three major cloud providers (AWS, Azure, and GCP) in order to bring security, durability, availability, and performance to all deployments of MongoDB. Atlas Clusters Security builds the security experience that Atlas customers depend on for mission-critical applications. Across the organization we own cluster networking, data encryption, database authentication, and related controls. This role sits on the Encryption & Compliance team. We own Encryption at Rest with customer-managed keys (Bring Your Own Key) across AWS, Azure, and GCP, including private networking to customer key management systems. We also own the security and compliance work that lets Atlas serve highly regulated markets, including government offerings and internal credential management. You will design and operate these systems in production, lead fleet-wide rollouts, and partner with customers when encryption or key-management issues hit their clusters. We are looking to speak to candidates who are based in San Francisco and would like a hybrid or in-office working model. What you’ll do Build and design new features for MongoDB Atlas Contribute to and lead complex technical projects Work closely with product and design teams, considering the user’s perspective while building technical solutions Work with customers and support engineers to fix issues Collaborate with team members to develop our codebase, best practices, and design principles Learn from and mentor other team members Join an on-call rotation to support Atlas’ production services We’re looking for someone who Has at least 5 years of professional software develop