Security Compliance Lead

As the single accountable owner of Plaid's core security compliance program, the full-time remote Security Compliance Lead will manage SOC 2 Type 2, ISO 27001, and ISO 27701 compliance, ensuring effective governance and internal audits while leveraging AI and automation to scale processes. Key responsibilities Own the compliance program and governance calendar, leading SOC 2 Type 2 and ISO certifications and ensuring timely completion of governance obligations Build and maintain a control catalog mapped across multiple frameworks, ensuring clear ownership and testing of controls Run internal audits and policy assurance, developing risk-based plans and tracking findings to remediation Required qualifications Proven experience as the accountable owner of SOC 2 Type 2 and ISO 27001/27701 programs through multiple audit cycles Hands-on experience with FedRAMP, including NIST 800-53 control implementation and continuous monitoring Experience planning and executing risk-based internal audits and collaborating with Finance on ITGCs and SOX Demonstrated ability to embed compliance into product development in partnership with Product and Engineering teams Fluency in AI applications and automation in compliance processes