Endex
Security and Compliance Manager
New York City. Posted 4 days ago
The role
You will own the security assurance and compliance program including controls, audit readiness, customer diligence and remediation tracking. You will coordinate people and evidence to meet commitments by working with Security Engineers and counsel.
What you will do
- Maintain policies, controls and evidence for audit frameworks and customer commitments
- Coordinate evidence collection, control testing, risk assessments and remediation
- Own security diligence and questionnaire workflows
- Coordinate access reviews, training, vendor risk and incident-readiness work
- Maintain an actionable risk register and report progress on control gaps and security commitments
Required qualifications
- Security Compliance Experience assessing controls in a cloud or SaaS environment
- Technical Understanding to discuss access, infrastructure and development controls with engineers
- Practical Judgment to prioritize gaps based on risk and operational context
- Evidence Quality to evaluate whether a record supports the claim being made
- Assurance Experience to connect policy requirements to operating controls and explain results to customers or auditors
Nice to have
- Experience with SOC 2 or ISO 27001 assessments
- Experience with enterprise security questionnaires
- Experience with SOC 2 or ISO 27001, control evidence automation and AI risk frameworks
Benefits
- Health & Dental Insurance
- Monthly Wellness Stipend
- 401K Matching
About the company
Endex builds AI agents that handle complex, end-to-end work for the world's most demanding teams. They are backed by the OpenAI Startup Fund.