Security Controls Assurance Lead

Skills

About the Role

You will define technical control requirements and acceptance criteria, assess implementations, review system changes, set AI governance standards, evaluate compliance-scope changes, and improve assurance workflows through automated evidence collection and control testing.

Requirements

• Experience supporting technology control programs through SOX readiness, public-company controls, FedRAMP, or multi-framework SOC 2 and ISO portfolios
• Engineering fluency with code, Terraform, and CI/CD pipelines
• Programming skills in Python, Go, Rust, or C/C++
• Knowledge of developer platforms, release engineering, or infrastructure controls
• Experience using Claude and other LLMs for audit and assurance workflows
• Ability to translate regulatory frameworks into engineering acceptance criteria
• Strong collaboration and communication skills

Responsibilities

• Define and assess control requirements for autonomous AI operators
• Review infrastructure, system, and agent-framework changes for control impact
• Set compliance requirements for internally built systems
• Define criteria for AI-assisted and AI-performed processes and controls
• Establish validation, evidence, and governance standards for AI controls
• Assess new compliance frameworks and scope changes for control-design impact
• Develop audit workflows including Claude-driven testing, automated evidence collection, walkthrough preparation, and framework mapping

Benefits

• Visa sponsorship support
• Equity donation matching
• Generous vacation
• Parental leave
• Flexible working hours