Staff Security Analyst (Governance and Trust)

Leads the compliance and trust side of Chainguard's Governance and Trust team, guiding three analysts now with formal management expected as the team grows. The analyst runs external examinations including SOC 2, ISO 27001 and Cyber Essentials, owns customer security diligence and the Trust Center, and runs third-party risk management, working from a single controls catalog with evidence drawn from systems rather than screenshots.

The role is also product owner for the AI agents that draft questionnaire answers and triage vendors. Chainguard looks for someone who has led the auditee side of combined SOC 2 Type 2 and ISO 27001 audits, knows SIG and CAIQ diligence, has run vendor risk at volume, and treats evidence as data.