Security Compliance Lead

The single accountable owner of Plaid's core security compliance programme, covering SOC 2 Type 2, ISO 27001 and ISO 27701 and their governance obligations, working remotely in the US. The lead runs the audit and governance calendar, builds one control catalog mapped across every framework to NIST 800-53 and FedRAMP depth, plans risk-based internal audits and the policy lifecycle, works with Finance on ITGCs, sets the programme's roadmap and KPIs, and builds compliance checkpoints into product launches.

It requires ownership of SOC 2 and ISO 27001 programmes through several audit cycles, building a common control framework, hands-on FedRAMP work, internal audit and SOX experience, and AI-driven automation of compliance work.