Staff Security Analyst (Governance and Trust)
Core
Lead the Governance & Trust team to execute external security examinations (SOC 2, ISO 27001), manage customer security diligence, and own the third-party risk program using a 'policies as code' operating model.
Role type
Senior Security Governance & Trust Lead (Management)
Builds
Compliance evidence packages, customer trust center content, third-party risk registers, and automated questionnaire response agents.
Domain
Cybersecurity compliance, supply chain security, and regulatory diligence.
Deliverable
production ML models
Required skills
External audit execution (SOC 2, ISO 27001), customer security diligence management, third-party risk management, AI agent product ownership, cross-functional stakeholder management, metrics-driven team leadership.
Preferred skills
US public-sector compliance (FedRAMP, CMMC), EU/UK regulatory regimes (DORA, Cyber Essentials), GRC platform migration, ISO/IEC 42001, software supply chain security (SBOM, SLSA), Lead Auditor certifications.
Technologies
Git, identity/HR/cloud systems, GRC platforms, AI agents.
Responsibilities
Run end-to-end external examinations (evidence calendar, sample fulfillment, auditor negotiation), own customer security questionnaires and audits, manage third-party vendor risk assessments, act as product owner for compliance automation agents, mentor junior analysts, and drive cross-functional remediation.
Seniority
Senior, hands-on IC with management responsibilities