Security Compliance Lead

Plaid

. Own Plaid’s core security compliance program covering SOC 2 Type 2, ISO 27001, and ISO 27701 .

Posted 10/30/2026full-timeRemote • United StatesSenior💰 $141,120 - $259,200 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing security compliance programs, specifically SOC 2 Type 2 and ISO 27001/27701, while effectively collaborating with cross-functional teams to ensure adherence to regulatory standards and continuous improvement through automation and risk-based audits.

Highest-signal resume keywords

SOC 2 Type 2 Compliance ManagementISO 27001/27701 Program OwnershipFedRAMP ExperienceNIST 800-53 Control ImplementationRisk-Based Internal Audit Planning

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Compliance Program Roadmap DevelopmentControl Framework MappingPolicy Lifecycle ManagementAudit Findings RemediationThird-Party AssessmentContinuous MonitoringGovernance Calendar ManagementAI Workflow AutomationBoundary DocumentationSSP Documentation

Soft Skills

AccountabilityCollaborationLeadershipCommunicationProblem-Solving

Industry Keywords

ITGCsSOXEU Financial-Services ObligationsBank-Consortium AssessmentsRegulatory ComplianceVendor ReviewsChange ManagementAccess ManagementTraining ManagementProduct Development Compliance

About the role

Key responsibilities & impact

Own Plaid’s core security compliance program covering SOC 2 Type 2, ISO 27001, and ISO 27701
Set the program structure, direction, roadmap, and KPIs
Lead annual and quarterly governance obligations, including policy, access, change-management, training, vendor, regulatory, bank, and partner reviews
Build and maintain a common control catalog mapped across frameworks, including FedRAMP and NIST 800-53 depth
Assign control owners, manage quarterly owner certification, and oversee testing
Build and execute a risk-based internal audit plan
Manage policy lifecycle and track findings through remediation
Partner with Finance on ITGCs
Report program progress to security leadership quarterly
Partner with Product and Engineering to assess launches and material infrastructure changes
Build compliance checkpoints into product discovery
Develop repeatable processes, runbooks, and AI-driven automation for evidence, testing, scoping, and audit requests

Requirements

What you’ll need

Accountable ownership of SOC 2 Type 2 and ISO 27001/27701 programs through multiple audit cycles
Experience setting compliance program roadmaps and KPIs
Experience building common control frameworks mapped across multiple frameworks, with control owners and testing
Hands-on FedRAMP experience (Rev5 or 20x)
NIST 800-53 control implementation
Boundary and SSP documentation
Third-party assessment and continuous monitoring experience
Experience planning and running risk-based internal audits testing operating effectiveness and policy adherence
Experience driving audit findings to remediation
Experience working with Finance or internal controls teams and external auditors on ITGCs and SOX
Experience partnering with Product and Engineering on audit scope and infrastructure changes
Experience embedding compliance checkpoints into product development
Experience running recurring governance calendars covering policy, access, training, vendor, regulatory, and partner reviews
AI-first approach with experience building AI workflows or automations that materially reduce manual compliance work
Experience with EU financial-services obligations or bank-consortium assessments is nice to have

Benefits

Comp & perks

Equity
Medical insurance
Dental insurance
Vision insurance
401(k)