Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 4 days ago

Head of Security, Trust & Compliance

StartupBreed23 open roles

Where
Bangkok, Bangkok, Thailand
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowHead of Security, Trust & ComplianceStartupBreed · Bangkok, Bangkok, Thailand

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on StartupBreed's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 58.1%60 days
This job: first seen 4 days ago

The posting

Confidential Hiring: Head of Security, Trust & Compliance

About the Company

Our client is a rapidly growing, venture-backed B2B SaaS company headquartered in Bangkok, Thailand, serving thousands of businesses across more than 100 countries. They develop AI-powered software solutions that help organizations streamline critical business processes and are recognized as one of the leading technology companies in the region.

With a highly international team and a strong engineering culture, the company values innovation, ownership, and collaboration. As they continue expanding globally, they are looking for an experienced security leader to strengthen their trust, security, and compliance capabilities.

About the Role

Reporting directly to the Chief Technology Officer (CTO), the Head of Security, Trust & Compliance will lead the organization's security, trust, and compliance initiatives. This strategic leadership role oversees Trust & Safety operations, security compliance, IT management, and enterprise security support throughout the customer lifecycle.

Managing a team of three, you will serve as the primary bridge between security operations and engineering, driving automation projects, strengthening security processes, and ensuring the organization maintains a strong security posture while supporting business growth.

Responsibilities

Trust & Safety

  • Own the end-to-end account verification workflow (KYB) after subscription, ensuring legitimate use of the platform.
  • Define and continuously improve fraud detection processes: fraudulent job postings and general abuse and misuse.
  • Act as the project manager for fraud detection automation: define requirements, timelines, and deliverables in collaboration with the Engineering team.
  • Establish and maintain Trust & Safety policies, escalation paths, and response playbooks.

Security & Compliance

  • Own and drive SOC 2 Type 2 compliance, including audit preparation, evidence collection, control monitoring, and remediation tracking.
  • Orchestrate the penetration testing program end-to-end: vendor selection, scoping, tooling setup, intake of findings into Jira, report negotiation, and remediation coordination with engineering teams.
  • Orchestrate the bug bounty program: vendor management, triage workflow, severity assessment coordination, and remediation tracking.
  • Own security incident response for non-product incidents (reported data breaches, unauthorized access, credential compromise). Product availability incidents remain with the Engineering Team.
  • Proactively identify security risks across the organization and implement mitigation strategies that balance security with operational velocity.

Sales Enablement

  • Directly answer complex or non-standard questions that require deep knowledge of Manatal's security posture.
  • Lead the technical response for security questionnaires, RFIs and RFPs, acting as the subject matter expert to support enterprise sales cycles.

IT Management

  • Manage the IT function (helpdesk, device management, access control, internal tooling).
  • Define and oversee the lifecycle management of all company IT assets, ensuring hardware and software inventory is secure, tracked, and compliant.
  • Ensure IT-related policies and operations align with SOC 2 and broader security requirements.

Culture & Cross-Functional Collaboration

  • Partner with Engineering to scope and prioritize security and trust-related automation projects.
  • Provide security input during product and architecture reviews when trust or compliance implications exist.
  • Foster a culture of security awareness across all departments through training and clear policy definitions.
  • Report on trust, security, and compliance posture to the CTO on a regular cadence.

Qualifications

  • 6+ years of experience in information security, trust & safety, or GRC, with at least 2 years in a leadership role within a technology company
  • Hands-on experience owning a SOC 2 Type 2 program (audit preparation, evidence collection, remediation tracking)
  • Experience managing external security vendors (penetration testing firms, auditors, or bug bounty platforms)
  • Ability to define security and trust workflows and translate them into actionable projects for engineering teams
  • Strong understanding of cloud infrastructure security and web application security
  • People management experience
  • Excellent English communication skills, written and verbal. You will negotiate with vendors, write policies, and interface with clients
  • Technical fluency: you can read a vulnerability report, understand API-level risks, and write requirements that engineers can act on

Nice to Have

  • Experience with KYB/KYC processes
  • Familiarity with privacy regulations (GDPR, PDPA, CCPA)
  • Professional certifications (CISM, CISSP, CISA)
  • Familiarity with compliance automation tools (Vanta, Drata, or similar)
  • Background in recruitment technology or HR tech

Language Proficiency

  • Fluent in English

Benefits

  • Social Security
  • Comprehensive health insurance + Telemedicine service
  • 15 days of paid annual leaves (Pro-rated)
  • ~13 days of national holiday
  • 2 weeks/year to work from anywhere (After probation)
  • Monthly new hire & birthday lunches
  • Personal development allowance

Working Conditions

  • Full-time position based in Bangkok, Thailand.
  • On-site working environment with flexibility to collaborate across global time zones.
  • Standard office hours with occasional flexibility depending on business needs.
  • Opportunity to work alongside an international, high-performing technology team.

Learn More About the Company

  • Please send your resume or enquiries to [email protected] or connect with us on LinkedIn.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against StartupBreed's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on StartupBreed's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    StartupBreed's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.