Member of Technical Staff, Security & Compliance Lead

The role

You will own security, IT, and compliance at Coram AI. You will manage compliance programs, lead customer security reviews, and automate security controls.

What you will do

• Own compliance programmes including SOC 2 Type II and ISO 27001
• Lead path to frameworks like NDAA / TAA, HIPAA, CJIS, CMMC, ITAR and FedRAMP
• Partner with sales on customer security reviews and due-diligence calls
• Own data flows, retention and privacy controls for video and biometric data
• Automate onboarding, offboarding and access reviews
• Manage identity, SSO, MFA, device management and endpoint protection
• Own IT systems and vendors across US, UK and India offices
• Work with engineering on security fixes and architecture changes
• Lead incident response and customer communication
• Build a prioritised security roadmap and hire as the function grows

Required qualifications

• 8+ years in security, compliance or IT
• Ownership of a security and compliance programme at a B2B startup or scale-up
• Personally led a SOC 2 Type II audit
• Led at least one more framework such as ISO 27001, HIPAA, CJIS, CMMC, ITAR or FedRAMP
• Experience selling into enterprise, government, law enforcement, defence or healthcare customers
• Experience working closely with sales on security reviews
• Scripting (Python or Bash)
• Cloud and infrastructure-as-code basics
• Identity platforms and device management
• Able to explain risk clearly to non-technical people
• Able to work on-site in the Bay Area

Nice to have

• Experience leading or building a team
• Biometric or video privacy experience
• Physical security or IoT hardware background
• Certifications such as CISSP, CISM, CISA or OSCP

About the company

Coram AI is reimagining video security using a cloud-native platform with computer vision and AI. The company is backed by Ansa Capital, Battery Ventures, Mosaic, 8VC and Up Partners.