Salary not listed
Compliance & Security Lead
OperationsRemote — UK, GMT+1 to GMT-5
Published on 2026-11-11
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Own Trigger.dev’s security compliance and data protection programs as its first Compliance & Security Lead. You’ll maintain audit readiness, support customer security reviews, and make compliance practical and efficient across the company.
About the company
Trigger.dev is an open-source background jobs platform for TypeScript apps. It helps teams run long-running and durable tasks without managing infrastructure.
The team
Operations, reporting to the founders and working closely with engineering.
Stack
Oneleet
What you'll do
- Run SOC 2 and HIPAA programs, including evidence collection and audit coordination.
- Use AI and automation to streamline compliance tasks.
- Complete security questionnaires and vendor assessments; maintain the trust portal.
- Review and negotiate DPAs, maintain processing records, and handle data subject requests.
- Maintain security, privacy, and data retention policies.
- Review tools and subprocessors, and keep the subprocessor list current.
- Assess and lead adoption of frameworks such as ISO 27001 or ISO 42001.
- Maintain and annually test incident response and breach notification processes.
What we're looking for
- 5+ years in security compliance, GRC, or data protection, ideally in SaaS or developer tools.
- Experience as the first or only compliance hire at an early-stage startup, with end-to-end ownership.
- Hands-on experience running a SOC 2 audit through to the final report.
- Current working knowledge of UK and EU GDPR and experience reviewing or negotiating DPAs.
- Experience completing security questionnaires accurately and quickly.
- Clear, plain-language writing skills.
- Technical understanding of cloud infrastructure, access control, and logging.
- Remote candidates must work within GMT+1 to GMT-5 and attend three in-person events annually.
Nice to have
- Experience with ISO 27001 or HIPAA.
- Experience with Oneleet, Vanta, or Drata.
- CIPP/E, CISA, CISSP, or a similar privacy or security certification.
- Experience using AI tools for questionnaires, evidence review, or policy work.
- Based in the UK and able to join the team in London.
Benefits
- Equity.
- 25 days of vacation plus national holidays.
- Private health insurance for UK employees.
- Home-office equipment support.
- Training budget.
- Company pension scheme or contributions to a private pension.
- Generous parental leave.