Security Controls Assurance Lead

The Security Controls Assurance Lead defines control requirements and acceptance criteria for global compliance obligations (SOC 2, ISO 27001/42001, HIPAA, public sector) across the software development lifecycle. They collaborate with engineering on implementing controls, validate shipped controls meet the bar, assess AI-assisted processes for audit readiness, stand up Claude-driven audit workflows, and act as the technical voice on what the control environment must achieve.

Candidates need experience in technology control programs (SOX, FedRAMP, SOC 2, ISO), engineering fluency to read code and Terraform, and programming skills in Python, Go, Rust, or C/C++. Deep familiarity with developer platform, release engineering, or infrastructure control domains required. Strong collaboration and ability to translate regulatory language into engineering criteria essential. Preferred: Big 4 audit combined with in-house AI-forward tech company experience and AI/ML controls experience.