Lead Security Compliance Engineer

Join Klaviyo, an AI-first B2C CRM platform empowering over 176,000 brands worldwide. As a Lead Security Trust & Compliance Engineer, you'll own key Trust & Compliance programs, drive audits, and enhance security practices. This role offers an opportunity to deepen your expertise in cybersecurity and make a significant impact on the company's mission.

Responsibilities

• Own internal and external audits and examinations end to end from scoping and readiness through fieldwork and evidence delivery; act as our primary point of contact for auditors and assessors, and develop action plans to correct findings and exceptions.
• Identify gaps against frameworks we do not yet meet, define the strategy to close them, and drive the implementation when Klaviyo takes on a new certification or regulation.
• Own security policies and standards end to end — author and maintain the policy, standard, and procedure hierarchy, decompose standards into testable requirements mapped to frameworks, and run the review, ratification, and exception management.