Klaviyo
Lead Security Compliance Engineer
$140K–$210K
Denver, CO +2 · Full-time · Posted Sep 22, 2026
- Location
- Denver, CO
Boston, Massachusetts, United States
Denver, Colorado, United States
About the job
Own and lead at least two Trust & Compliance programs, setting strategy and engineering sustainable audits, controls, evidence pipelines, and automation.
What you'll do
- Manage audits and examinations end to end, serve as the auditor contact, and drive resolution of findings.
- Own security policies and standards, define controls, and build continuous control-health metrics and evidence pipelines.
- Automate compliance workflows and tactically lead programs by delegating work and mentoring practitioners.
What they ask for
- In-depth knowledge of multiple security and privacy frameworks, including the ability to identify gaps and implement a strategy for new frameworks.
- Personally owned end-to-end security and privacy compliance audit programs and served as the primary auditor interface.
- Experience authoring policies and standards and designing, assessing, and continuously monitoring security and privacy controls.
- Experience with GRC engineering or security automation, program KPIs and SLAs, and mentoring or setting technical direction without formal authority.
Nice to have
- Compliance platforms such as Drata or Vanta; SQL, REST APIs, or Python.
- Infrastructure-as-code or policy-as-code; agentic AI tooling or AI controls; identity governance; relevant certifications such as CISA, CISSP, or CCSP.
Pay
$140,000 — $210,000 USD (base salary)
Tools
AWS, Kubernetes, SQL, REST APIs, Python, Terraform, OPA/Rego, Conftest
AI focus
Apply AI and automation to reduce toil in Trust & Compliance workflows; agentic AI tooling and AI control governance are preferred experience.
Model-written summary · the original posting is authoritative