Trust & Assurance Lead

1 month ago
Full-time
Senior
Cybersecurity
Sysdig

Sysdig

Sysdig provides advanced security solutions for containers, Kubernetes, and cloud environments, enabling organizations to gain visibility and context through runtime insights to proactively prevent cyber attacks.

IT Services
251-1K
Founded 2013
$730M raised

Description

  • Rebuild assurance as engineering through policy-as-code, continuous control validation, drift detection, and automated evidence generation.
  • Own ISO 27001:2022, ISO 27701:2019, and SOC 2 Type II certification programs, including audits, assessments, remediation, and ISMS/PIMS artifacts.
  • Build Sysdig’s AI assurance program covering ISO 42001, the NIST AI RMF, applicable EU AI Act obligations, AI system controls, data handling, and AI-assisted development.
  • Manage AI-related third-party risk and document risk acceptance decisions.
  • Lead customer, partner, and high-consequence security assurance engagements, including questionnaires, trust materials, and third-party audits.
  • Define defensible security specifications for access, separation of duties, administrative transparency, and tenant isolation.
  • Enable sales and account teams to answer routine security questions independently through repeatable content and processes.
  • Maintain the accuracy of public security claims, certifications, trust-center content, and marketplace listings.
  • Convert assurance findings into engineering commitments, risk acceptance decisions, and escalations.
  • Use automation and agentic tooling for evidence generation, questionnaire drafting, control validation, and gap analysis; represent Sysdig externally through customer engagement, publishing, and speaking.

Requirements

  • End-to-end experience running certification and audit programs for a cloud or SaaS company.
  • Experience shipping code or automation for control objectives using tools such as Python, Go, Terraform, CI pipelines, APIs, or compliance platforms.
  • Deep expertise in at least two of SOC 2, ISO 27001, ISO 27701, and ISO 42001, with working knowledge of the others.
  • Experience demonstrating operational compliance evidence to enterprise customers or auditors.
  • Cloud-native technical knowledge including Kubernetes, containers, at least one major cloud provider, and runtime security fundamentals.
  • Experience building with agentic tooling and understanding its limitations.
  • Ability to distinguish material business risk from audit-only findings and communicate effectively with CISOs and engineers.
  • Experience creating an assurance or compliance function from the ground up.
  • Experience with AI governance frameworks such as ISO 42001, the EU AI Act, or NIST AI RMF.
  • Experience with continuous controls monitoring, GRC engineering, security vendors, public-sector requirements, regulated financial services, or EU data protection is preferred.
  • Conference speaking, published research, or contributions to control frameworks or open standards are preferred.

Benefits

  • U.S. salary range of $160,000–$200,000 per year.
  • Extra paid days off for well-being.
  • 401(k) plan with a 3% company match.
  • Maternity and parental leave.
  • Mental health support for employees and families through Modern Health.
  • Full health benefits package for employees and families.
  • Remote work opportunity.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior GRC Analyst

Tines 51-250 Construction & Engineering

Tines is seeking a remote U.S.-based Senior GRC Analyst to operate its SOC 2, ISO, and FedRAMP compliance programs while supporting vendor risk management and customer security assurance during a growth phase.

AWS Azure GCP Penetration Testing
5 hours, 54 minutes ago

Compliance Analyst

Turing 251-1K Internet Software & Services

Turing is hiring a remote Compliance Analyst to protect its global technical-talent network by managing KYC, identity verification, AML screening, and fraud-quality controls across more than 100 countries.

6 hours, 24 minutes ago

Part D Senior Investigator

Attain Talent 1-10 staffing & recruiting

Attain Talent is seeking a Part D Senior Investigator to support federal healthcare program integrity through investigations, compliance oversight, risk assessment, and evidence-based recommendations involving pharmacies, dispensers, and manufacturers.

1 day, 6 hours ago

Compliance & Sustainability Intelligence Manager (Emerging Programs)

rePurpose Global 51-250 Professional Services

rePurpose Global is hiring a Compliance & Sustainability Intelligence Manager to research evolving packaging EPR regulations, guide consumer brands through compliance, and shape the company’s regulatory intelligence and platform strategy.

2 days, 6 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers