Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 1 hour agoWe saw it 16 min after it went up

Security Compliance Lead

Plaid131 open roles

Pay
$141,120 – $259,200 a year
Where
Remote United States
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity Compliance LeadPlaid · Remote United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Plaid's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.8% of postings close within 7 days. Measured by our own scanner across the market. Plaid postings stay open a median of 52 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.5%3 days
  3. 12.8%7 days
  4. 20.6%14 days
  5. 35.6%30 days
  6. 58.4%60 days
This job: posted 1 hour ago

Plaid median: 52 days open

The posting

About the team

Plaid’s Security Governance, Risk, and Compliance (GRC) team enables the business by proactively managing information security risk and maintaining effective controls. We partner across the company to keep Plaid’s platform secure, resilient, and aligned with industry and regulatory expectations.

Our assurance program builds trust with customers, consumers, and data partners. Core compliance is how we prove it. We run the certifications, audits, and regulatory obligations that let banks, customers, and regulators rely on Plaid, and we keep them aligned with a product that keeps changing.

About the role

As Security Compliance Lead, you’ll be the single accountable owner of Plaid’s core security compliance program: SOC 2 Type 2, ISO 27001, ISO 27701, and their governance obligations. Banks, enterprise customers, and regulators rely on what you own when they decide to work with Plaid, and your work keeps those certifications and commitments reliable and on time as the business grows.

You will set the program’s structure and direction, with a roadmap and KPIs that turn compliance from a pass/fail event into a program leadership can steer. The control catalog you build will sit behind every audit, so one control and one piece of evidence can satisfy many obligations, from SOC 2 to FedRAMP. Your internal audits will find gaps before an external auditor, customer, or regulator does. You will make sure compliance shapes product decisions before launch instead of reacting to them.

As Plaid expands into new products, markets, and frameworks, you will build a program that keeps pace without adding headcount, using AI and automation.

Responsibilities

- Own the compliance program and governance calendar: Lead SOC 2 Type 2, ISO 27001, and ISO 27701 end to end. Run the annual and quarterly governance obligations (policy reviews, access and change-management reviews, security training, vendor reviews, and regulatory, bank, and partner assessments), each with an owner, a date, and evidence of completion.

- Build and own the control catalog: Design and maintain one control catalog mapped across every framework Plaid reports against, built to FedRAMP and NIST 800-53 depth, with clear control owners, quarterly owner certification, and testing.

- Run internal audit and policy assurance: Build a risk-based internal audit plan that tests operating effectiveness and whether policies are followed, and own the policy lifecycle. Track findings to remediation, and partner with Finance on ITGCs.

- Set direction and measure the program: Define what a mature program looks like, set the roadmap and KPIs to get there, and report progress to security leadership each quarter.

- Embed GRC by design: Track product roadmaps and supporting infrastructure with Product and Engineering. You will assess how launches and material changes affect audit scope and system boundaries, and build lightweight checkpoints into product discovery.

- Scale through AI and automation: Build repeatable processes, runbooks, and AI-driven automation for evidence, testing, scoping, and audit requests.

Qualifications

Must haves:

- Compliance program ownership:

- Has been the accountable owner of SOC 2 Type 2 and ISO 27001/27701 programs through multiple audit cycles, including setting the roadmap and KPIs that matured them

- Has built or rebuilt a common control framework mapped across multiple frameworks, with control owners and testing

- FedRAMP:

- Hands-on FedRAMP experience (Rev5 or 20x): NIST 800-53 control implementation, boundary and SSP documentation, third-party assessment, and continuous monitoring

- Internal audit, policy assurance, ITGC, and SOX:

- Has planned and run risk-based internal audits that test operating effectiveness and policy adherence, and has driven findings to remediation

- Has worked with Finance or internal controls teams and external auditors on ITGCs and SOX

- Governance obligations and product-aware compliance:

- Has partnered with Product and Engineering to scope launches and infrastructure changes into audits, and has embedded compliance checkpoints into product development

- Has run a recurring governance calendar (policy, access, training, vendor, and regulatory or partner reviews) and translated obligations from customers, banks, regulators, or government agencies into control and audit requirements

- AI fluency and tooling:

- Takes an AI-first approach: has built AI workflows or automations that materially reduced manual compliance work, and shares what works with the team

Nice to have:

- Experience with EU financial-services obligations (DORA, central bank IT and cyber assessments, FCA operational and security risk reporting) or bank-consortium assessments such as TruSight

Our mission at Plaid is to unlock financial freedom for everyone. To support that mission, we seek to build a diverse team of driven individuals who care deeply about making the financial ecosystem more equitable. We recognize that strong qualifications can come from both prior work experiences and lived experiences. We encourage you to apply to a role even if your experience doesn't fully match the job description. We are always looking for team members that will bring something unique to Plaid!

Plaid is proud to be an equal opportunity employer and values diversity at our company. We do not discriminate based on race, color, national origin, ethnicity, religion or religious belief, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, military or veteran status, disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state, and local laws. Plaid is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance with your application or interviews due to a disability, please let us know at [email protected].

Please review our Candidate Privacy Notice here https://plaid.com/legal/#candidate-privacy-notice.

Additional compensation in the form(s) of equity and/or commission are dependent on the position offered. Plaid provides a comprehensive benefit plan, including medical, dental, vision, and 401(k). Pay is based on factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience and skillset, and location. Pay and benefits are subject to change at any time, consistent with the terms of any applicable compensation or benefit plans.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Plaid's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Plaid's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Plaid's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.