Security Compliance Lead
Plaid is a financial data network and fintech infrastructure company that helps people securely connect financial accounts to digital financial services.
Funding history
Projects
About Plaid Inc.
Plaid provides developer infrastructure and financial tools for account connectivity, financial data access, bank payments, identity verification, AML monitoring, credit and underwriting, and fraud prevention. Its network supports thousands of fintech companies and more than 12,000 financial institutions across the United States, Canada, the United Kingdom, and Europe.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will own the security compliance program, including SOC 2 Type 2 and ISO 27001/27701. You will maintain a cross-framework control catalog, lead internal audits and policy assurance, set program roadmaps and KPIs, embed compliance in product changes, and automate evidence, testing, scoping, and audit work.
Requirements
- Ownership of SOC 2 Type 2 and ISO 27001/27701 programs through multiple audit cycles
- Experience building a common control framework across multiple frameworks
- Hands-on FedRAMP experience, including NIST 800-53 control implementation, boundary and SSP documentation, third-party assessment, and continuous monitoring
- Experience planning and running risk-based internal audits
- Experience with ITGCs and SOX
- Experience embedding compliance checkpoints into product development
- Experience running governance calendars and translating external obligations into controls and audit requirements
- Experience building AI workflows or automations that reduce manual compliance work
Responsibilities
- Lead SOC 2 Type 2 and ISO 27001/27701 compliance programs and governance obligations
- Design and maintain a control catalog mapped across compliance frameworks
- Build and run risk-based internal audits and manage the policy lifecycle
- Track audit findings through remediation and partner with Finance on ITGCs
- Set the compliance roadmap and KPIs and report progress to security leadership
- Assess product and infrastructure changes for audit scope and system-boundary impacts
- Build AI-driven automation for evidence, testing, scoping, and audit requests
Benefits
- Equity
- Medical insurance
- Dental insurance
- Vision insurance
- 401(k)
