Security Compliance Lead
Core
Single accountable owner of Plaid's core security compliance program, managing SOC 2 Type 2, ISO 27001, ISO 27701, and FedRAMP obligations to ensure platform security and regulatory alignment.
Role type
Senior IC Security Compliance Lead
Builds
Compliance certifications, control catalogs, internal audit plans, and automated evidence processes
Domain
Financial services / Information Security / Regulatory Compliance
Required skills
SOC 2 Type 2 program ownership, ISO 27001/27701 management, FedRAMP Rev5/20x experience, NIST 800-53 control implementation, risk-based internal audit planning, policy lifecycle management, product-aware compliance integration, AI-driven automation for compliance
Preferred skills
EU financial-services obligations (DORA, central bank assessments), bank-consortium assessments (TruSight)
Technologies
NIST 800-53, FedRAMP, SOC 2, ISO 27001, ISO 27701, AI automation tools
Responsibilities
Lead end-to-end compliance audits (SOC 2, ISO, FedRAMP), design and maintain a unified control catalog mapped across frameworks, execute risk-based internal audits and track remediation, define program roadmap and KPIs, embed compliance checkpoints into product development lifecycles, build AI-driven automation for evidence collection and testing
Seniority
Senior, hands-on IC
