[Hiring] Security Compliance Lead @Plaid

Role Description

As Security Compliance Lead, you’ll be the single accountable owner of Plaid’s core security compliance program: SOC 2 Type 2, ISO 27001, ISO 27701, and their governance obligations. Your work keeps those certifications and commitments reliable and on time as the business grows.

• Set the program’s structure and direction, with a roadmap and KPIs.
• Build a control catalog that satisfies many obligations, from SOC 2 to FedRAMP.
• Conduct internal audits to find gaps before external auditors do.
• Ensure compliance shapes product decisions before launch.
• Build a program that keeps pace with Plaid’s expansion using AI and automation.

Responsibilities

• Own the compliance program and governance calendar:
• Lead SOC 2 Type 2, ISO 27001, and ISO 27701 end to end.
• Run annual and quarterly governance obligations (policy reviews, access and change-management reviews, security training, vendor reviews, and regulatory, bank, and partner assessments).
• Build and own the control catalog:
• Design and maintain a control catalog mapped across every framework Plaid reports against.
• Ensure clear control owners, quarterly owner certification, and testing.
• Run internal audit and policy assurance:
• Build a risk-based internal audit plan that tests operating effectiveness and policy adherence.
• Track findings to remediation and partner with Finance on ITGCs.
• Set direction and measure the program:
• Define what a mature program looks like and report progress to security leadership each quarter.
• Embed GRC by design:
• Track product roadmaps and assess how launches affect audit scope.
• Build lightweight checkpoints into product discovery.
• Scale through AI and automation:
• Build repeatable processes, runbooks, and AI-driven automation for evidence, testing, scoping, and audit requests.

Qualifications

• Compliance program ownership:
• Accountable owner of SOC 2 Type 2 and ISO 27001/27701 programs through multiple audit cycles.
• Experience in building or rebuilding a common control framework mapped across multiple frameworks.
• FedRAMP:
• Hands-on FedRAMP experience (Rev5 or 20x): NIST 800-53 control implementation, boundary and SSP documentation, third-party assessment, and continuous monitoring.
• Internal audit, policy assurance, ITGC, and SOX:
• Experience in planning and running risk-based internal audits.
• Collaboration with Finance or internal controls teams and external auditors on ITGCs and SOX.
• Governance obligations and product-aware compliance:
• Partnership with Product and Engineering to scope launches and infrastructure changes into audits.
• Management of a recurring governance calendar and translation of obligations into control and audit requirements.
• AI fluency and tooling:
• Experience in building AI workflows or automations that reduced manual compliance work.

Benefits

• Comprehensive benefit plan, including medical, dental, vision, and 401(k).
• Additional compensation in the form(s) of equity and/or commission.

Company Description

Plaid is proud to be an equal opportunity employer and values diversity at our company. We do not discriminate based on race, color, national origin, ethnicity, religion or religious belief, sex, sexual orientation, gender, gender identity, gender expression, transgender status, age, military or veteran status, disability, or other legally protected characteristics.

Plaid is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process.