Trust & Assurance Lead

🔥 20 hours ago

🇺🇸 United States – Remote

💵 $160k - $200k / year

⏰ Full Time

🟠 Senior

🔒 Insurance

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sysdig

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2013

🔒 Cybersecurity

🏢 Enterprise

💰 $350M Series G on 2021-12

Cybersecurity • Cloud Security • Enterprise

Sysdig is a company that provides cloud and container security solutions. Their platform, Sysdig Secure, is designed to protect cloud-native applications by offering cloud workload protection, vulnerability management, and posture management. Sysdig focuses on real-time cloud security, detecting and responding to threats at cloud speed. The platform is a complete Cloud-Native Application Protection Platform (CNAPP) that prioritizes vulnerabilities, misconfigurations, and threats. Sysdig stands out for its runtime insights, allowing for near real-time alerting and efficient forensic investigations. They offer services across multi-cloud environments with a goal of safeguarding cloud credentials and preventing cyber threats.

📋 Description

• Own how Sysdig proves its security claims to auditors, enterprise customers, and regulators • Rebuild assurance as engineering by instrumenting controls, expressing policy as code, and detecting control drift • Own the ISO 27001:2022, ISO 27701:2019, and SOC 2 Type II certification program end-to-end • Own ISMS and PIMS artifacts and quarterly security objectives • Run independent internal audits and external assessors • Reduce labor per audit cycle year over year • Build Sysdig's AI assurance program covering its AI systems and enterprise AI requirements • Define and instrument controls for model and agent behavior, AI data handling, and AI-assisted development • Own AI third-party risk • Run customer and partner assurance, including trust profiles, questionnaires, intake, and document libraries • Lead high-consequence assurance engagements for regulated financial services, pharmaceutical, aviation, and sovereign or region-specific programs • Write defensible specifications for access paths, separation of duties, administrative transparency, and tenant isolation • Enable sales engineers and account teams to answer most security questions • Maintain the integrity of public security claims, certifications pages, trust center, and marketplace listings • Push risk findings into engineering commitments or formal management responses • Use Sysdig's platform in production to generate evidence and influence the product roadmap • Use agents to scale evidence generation, questionnaire drafting, control validation, and gap analysis • Engage customer security teams and represent Sysdig externally through publishing and speaking

🎯 Requirements

• Have run a certification and audit program end-to-end for a cloud or SaaS company, owning the outcome rather than the coordination • Have shipped code or automation in service of a control objective, using Python, Go, Terraform, CI pipelines, or an API wired into a compliance platform • Have genuine depth in at least two of SOC 2, ISO 27001, ISO 27701, ISO 42001, with working knowledge of the rest • Have sat across from an enterprise customer's security team or an auditor and demonstrated compliance with operational evidence • Have a cloud-native technical foundation: Kubernetes, containers, at least one major cloud, and enough understanding of runtime security • Are already building with agentic tooling and have opinions about where it fails • Can distinguish significant findings from findings that only matter to an auditor • Are credible with a customer's CISO and with engineers • Built an assurance or compliance function that did not exist before • Worked on AI governance frameworks including ISO 42001, the EU AI Act, and NIST AI RMF • Built continuous controls monitoring or GRC engineering tooling • Worked assurance at a security vendor • Experience with public sector requirements, regulated financial services, or EU data protection • Track record of conference speaking, published research, or contribution to a control framework or open standard

🏖️ Benefits

• Extra days off to prioritize your well-being • 401(k) Retirement Savings Plan with a 3% company match • Maternity and Parental Leave • Mental health support for you and your family through the Modern Health app • Full health benefits package for you and your family