Trust & Assurance Lead

The role

You will own how Sysdig proves its security claims to auditors, enterprise customers and regulators, and rebuild that work as engineering. You will also build an AI assurance program from nothing, covering Sysdig's own AI systems and AI questions in customer deals.

What you will do

• Rebuild assurance as engineering: instrument controls to report their own state and detect control drift in near real time
• Own the ISO 27001:2022, ISO 27701:2019 and SOC 2 Type II certification program end-to-end, including fieldwork, sampling requests and remediation
• Drive down the labor cost of each audit cycle year over year
• Build AI assurance covering ISO 42001, the NIST AI RMF and applicable EU AI Act obligations
• Own AI third-party vendor risk
• Run customer and partner assurance, including the trust profile, questionnaire pipeline and high-consequence regulated engagements
• Write specifications that settle hard security questions, defensible under audit
• Enable sales engineers and account teams to answer most security questions
• Own the integrity of public security claims such as the certifications page and trust center
• Turn audit findings into owned commitments or formal risk acceptances

Required qualifications

• Have run a certification and audit program end-to-end for a cloud or SaaS company, owning the outcome
• Have shipped code or automation in service of a control objective (for example Python, Go, Terraform, CI pipelines or an API wired into a compliance platform)
• Have genuine depth in at least two of SOC 2, ISO 27001, ISO 27701 and ISO 42001, with working knowledge of the rest
• Have sat across from an enterprise customer's security team or an auditor and demonstrated compliance with operational evidence
• Have a cloud-native technical foundation: Kubernetes, containers, at least one major cloud, and understanding of runtime security
• Are already building with agentic tooling
• Can separate findings that matter from those that only matter to an auditor, and say so in the room
• Are credible with both a customer's CISO and the engineers asked to change how they work
• Are comfortable with problems where established principles don't fully apply

Nice to have

• Built an assurance or compliance function that did not exist before
• Worked on AI governance frameworks (ISO 42001, EU AI Act, NIST AI RMF) while requirements were still moving
• Built continuous controls monitoring or GRC engineering tooling
• Worked assurance at a security vendor
• Experience with public sector requirements, regulated financial services or EU data protection
• Conference speaking, published research, or contribution to a control framework or open standard

Benefits

• Extra days off
• 401(k) Retirement Savings Plan with a 3% company match
• Maternity and Parental Leave
• Mental health support for you and your family through the Modern Health app
• Full health benefits package for you and your family

Before you apply

• Sysdig encourages applications even if your experience does not perfectly match the description

About the company

Sysdig secures cloud innovation and created Falco, the open standard for cloud threat detection. It is recognized as a Best Place to Work and one of Deloitte's fastest-growing companies for five years.