Klaviyo
Lead Security Compliance Engineer
$140K–$210K
Boston, MA +2 · Full-time · Posted Sep 22, 2026
- Location
- Boston, MA
Boston, Massachusetts, United States
Denver, Colorado, United States
About the job
Own and lead multiple security trust and compliance programs, including audits, control engineering and monitoring, policy management, and compliance automation.
What you'll do
- Lead internal and external audits end to end, manage auditor relationships, and drive resolution of findings.
- Set strategy for assigned trust and compliance programs, including new framework or regulatory implementations and security policies.
- Design and monitor security controls and automate workflows for testing, evidence collection, identity governance, and security Q&As.
What they ask for
- In-depth knowledge of multiple security and privacy frameworks, and ability to identify gaps and implement programs against them.
- Personally owned end-to-end security and privacy compliance audits, including direct work with auditors.
- Experience authoring policies and standards, and designing, assessing, and continuously monitoring security and privacy controls.
- Experience in GRC engineering or security automation; knowledge of enterprise SaaS, cloud infrastructure, and cybersecurity technologies.
Nice to have
- Compliance automation platforms such as Drata or Vanta; SQL, REST APIs, Python, Terraform, or OPA/Rego.
- Agentic AI tooling or AI governance; identity governance; relevant certifications such as CISA, CISSP, or CCSP.
Pay
$140,000 — $210,000 USD (base salary)
Tools
AWS, Kubernetes, SQL, REST APIs, Python, Terraform, OPA/Rego, Conftest
AI focus
Apply AI and automation to reduce compliance toil; agentic AI tooling and AI control governance are preferred areas.
Model-written summary · the original posting is authoritative