Security Trust and Assurance Manager

As a Security Trust and Assurance Manager, you will work closely with our CISO and various teams to shape our communication about security, privacy, and compliance. Your contributions will directly impact our business growth.

About SonarSource

Sonar, a rapidly growing company focused on building deep trust with our customers through a top-tier security posture.

Unwavering Customer Obsession: You truly view security as a way to enable people. You are passionate about building solutions that help teams innovate and move fast without ever compromising the safety of our organization or our users

Responsibilities

• Responsibilities include managing customer security inquiries, collaborating with engineering and security teams, reviewing contracts, managing trust systems, and developing AI prompts.
• Gestionar un proceso claro para responder a preguntas de seguridad y técnicas de los clientes y usuarios internos, y mejorar y mantener nuestro Centro de Confianza.
• Colaborar estrechamente con los equipos de Ingeniería, Producto, comercial y de Seguridad de la Información para traducir detalles técnicos complejos en respuestas claras y precisas para nuestros clientes.
• Revisar contratos de clientes, MSAs y DPAs, y proporcionar retroalimentación, redacción y apoyo en la negociación sobre cláusulas de seguridad.
• AI Proficiency: You have a proven ability to use AI tools and create complex prompts to solve tricky security problems and automate repetitive governance tasks

Requirements

• Autonomous Leadership & Organizational Acumen: You have the strong organizational skills needed to juggle multiple high-stakes projects, audit reviews, and contract negotiations all at once, requiring minimal supervision to achieve broad goals
• Contract & Legal Acumen: You have solid experience reviewing, redlining, and providing feedback on security clauses and technical language in customer contracts. You are great at bridging the gap between Legal, Sales, Engineering and InfoSec
• Technical Diplomacy & Engineering Collaboration: You are a fantastic communicator! You can partner deeply with Engineering to validate technical details and then turn around and explain those complex security requirements in clear, simple business terms for non-technical peers
• Executive Presence: You are comfortable and experienced in working directly with senior leaders, especially a CISO. You know how to effectively communicate strategy, report on trust metrics, and give sound advice on risk

Preferred

• Extensive Multi-Domain InfoSec Expertise: You bring deep experience across several security domains, which might include GRC, Cloud Security, IAM, or Application Security. You are also very familiar with common compliance frameworks like SOC 2, ISO 27001, and GDPR that our customers care about

Benefits

• Enjoy a comprehensive benefits package, including a 401K plan, healthcare coverage, and generous PTO.