Compliance & Security Lead

Job not on LinkedIn

🔥 14 minutes ago

🇬🇧 United Kingdom – Remote

⏰ Full Time

🟠 Senior

🚔 Compliance

👻 Ghost score 25%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• 6 open roles for a team of 10.
• No salary listed.

Apply Now

Find Similar Remote Jobs

Trigger.dev

WebsiteLinkedInAll Job Openings

1 - 10 employees

Founded 2022

💼 Consulting

📦 Logistics

📣 Marketing

Consulting • Logistics • Marketing

Trigger. dev is a developer-focused platform for building and running AI-driven workflows and long-running background tasks in TypeScript (with Python support). It provides durable cron schedules, queues and concurrency controls, automatic retries, observability and real-time streaming to frontends, plus tooling for building autonomous AI agents with tool-calling and human-in-the-loop capabilities. Offered as an open-source, self-hostable solution and a managed SaaS with SDKs and integrations, it targets teams that need reliable, scalable orchestration of asynchronous jobs and LLM-based workflows.

📋 Description

• Own security compliance and data protection at Trigger.dev • Report to the founders and work closely with engineering • Run the SOC 2 and HIPAA programs • Own the SOC 2 audit and manage evidence collection in Oneleet • Use AI and automation to accelerate questionnaire answers, evidence collection and policy reviews • Complete security questionnaires and vendor assessments • Share security reports and bridge letters • Maintain the trust portal • Review and negotiate DPAs with customers and suppliers alongside lawyers • Maintain records of processing and handle UK and EU GDPR data subject requests • Write and maintain security, privacy and data retention policies • Ensure retention periods are enforced • Review new tools and subprocessors and maintain the subprocessor list • Assess the need for frameworks such as ISO 27001 or ISO 42001 and lead implementation • Deliver onboarding training and create simple compliance processes • Maintain and test incident response and breach notification processes annually

🎯 Requirements

• 5+ years in security compliance, GRC or data protection, ideally at a SaaS or developer tools company • Experience at an early-stage startup as the first or only compliance hire, with full ownership • Hands-on experience running a SOC 2 audit, from evidence collection through to the final report • Up-to-date working knowledge of UK and EU GDPR • Experience reviewing or negotiating DPAs • Experience completing security questionnaires accurately and quickly • Clear, plain writing • Technical understanding of cloud infrastructure, access control and logging; coding is not required • If remote, must be within CET to ET timezones (GMT+1:00 to GMT-5:00) • Experience with ISO 27001 or HIPAA preferred • Experience with Oneleet, Vanta or Drata preferred • Privacy or security certification such as CIPP/E, CISA or CISSP preferred • Experience using AI tools for questionnaires, evidence review and policy work preferred • UK-based and able to join the team in London preferred

🏖️ Benefits

• Generous compensation and equity • Async working • Home office equipment • Private health insurance, with Vitality for the UK team • Dog and cat friendly London office • 25 days vacation excluding national holidays • Sick leave • Generous parental leave • Annual training budget • Company pension scheme or direct contributions to a private pension

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume