[Hiring] Security & Compliance Lead @Mobbin

Role Description

We’re hiring a Security & Compliance Lead to work alongside our existing lead and keep Mobbin’s security, privacy and compliance programme running as the company grows quickly.

You’ll start by owning our external compliance work:

• Enterprise contract reviews
• Customer security reviews
• SOC 2 audit
• Public legal terms

You’ll work closely with sales, external counsel, our auditor and our insurer. You don’t need an engineering background, but you do need to be security-literate enough to ask engineers the right questions, trace a request or issue all the way through, and verify answers rather than assume them.

Together, you and your peer will cover the full programme. Your peer focuses on internal security and hardening; you focus on external compliance. You’ll each stay familiar with the other’s work so the programme never stalls when one of you is away.

Our team is small, so this is a hands-on role. You’ll help us protect customer data, meet our commitments to enterprise customers, and build security into how we develop and operate our product.

(This role starts in 2027)

Qualifications

• Verify before you conclude. You trace things to the end and don’t act on assumptions you haven’t checked.
• Learn fast from feedback. Once something is corrected, you apply the lesson in new situations without being told.
• Have reviewed and negotiated customer contracts (MSAs, DPAs, security addenda), and know when to hold a position and when to escalate to counsel.
• Have run or supported a SOC 2 (or similar) audit and answered enterprise security questionnaires.
• Make proportionate risk decisions and recognise when specialist input is needed.
• Be comfortable working directly with customers and legal, and juggling requests across several teams at once.
• Ask questions early and build your own network across the team, rather than proving independence by working alone.

Requirements

• A technical background, or comfort reading code, querying data and examining logs.
• Experience with cyber insurance applications, bug bounty programmes, or building a GDPR programme.
• Experience reviewing the security of AI features, MCP integrations, or other systems that connect models to customer data and tools.
• Experience configuring compliance automation platforms, identity and device management systems, or web application firewalls.
• Experience improving security incident response, running exercises, or building monitoring and evidence automation.

Benefits

• Competitive salary
• Revenue-sharing after a one-year cliff
• Work-life balance
• Flexible work hours
• Health & fitness benefits
• Health insurance, medical coverage, and dental coverage
• Work from anywhere (Singapore office or remote)
• Yearly company retreat
• Apple equipment