Lead security and compliance initiatives at Coram AI, ensuring data protection for a diverse range of clients.
Posted by employer 22 hours ago
First seen on Joblaze 7 hours ago
Last verified on the company career page 7 hours ago
Skills & Technologies
What you'll build
- Own compliance programmes end to end
- Lead path to security frameworks
- Partner with sales on security reviews
- Own data flows and privacy controls
- Build a prioritised security roadmap
Must have
- 8+ years in security, compliance or IT
- Led a SOC 2 Type II audit
- Experience selling into enterprise or government
- Technical enough to work with engineers
Nice to have
- Experience leading or building a team
- Biometric or video privacy experience
- Physical security or IoT hardware background
- Certifications such as CISSP, CISM, CISA or OSCP
AI in the day-to-day
Our AI-native platform enhances safety and efficiency in real-world security and operations.
Requirements
- Experience
- 8+ years
Not disclosed in this posting: compensation, work arrangement, visa sponsorship.
Joblaze summary
The Lead Security & Compliance Engineer at Coram AI is responsible for overseeing the company's security and compliance initiatives, ensuring that customer data is protected while facilitating business growth. This role requires expertise in managing compliance programs like SOC 2 Type II and ISO 27001, along with technical skills in scripting and cloud infrastructure. Ideal candidates have significant experience in security and compliance within a B2B startup environment, particularly in sectors such as government or healthcare. The position offers the chance to shape the security function as the company expands.
Joblaze insights
- Listed today — first seen on Joblaze October 13, 2026. Last confirmed on Coram AI's careers page October 13, 2026.
- This exact title is also open at 1 other location at Coram AI: Sunnyvale, United States.
Quick facts
- How much experience is required?
- At least 8 years of relevant experience for this Member of Technical Staff, Security & Compliance Lead role.
- What's the tech stack?
- Joblaze extracted these technologies from the posting: CJIS, CMMC, FedRAMP, GDPR, HIPAA, ISO 27001.
- What seniority level is this role?
- Coram AI targets lead candidates for this position.
- Is this full-time or contract?
- Full-time for this Member of Technical Staff, Security & Compliance Lead role at Coram AI.
From the original posting
The Role:
We’re hiring our first Lead Security & Compliance Engineer to own security, IT and compliance at Coram. Our customers range from police departments and federal agencies to Fortune 500 companies, schools and hospitals, across the US, UK and Canada. Every one of them asks how we protect their data. You’ll make sure compliance never blocks a deal: you’ll own our certifications, lead customer security reviews, and turn policy into real, automated controls across the company. You’ll work directly with our engineering leadership and start hands-on. As we grow, you’ll have the opportunity to build out the function and the team.
Responsibilities:
Own our compliance programmes end to end, starting with SOC 2 Type II and ISO 27001: controls, evidence, policies, auditors and remediation.
Lead our path to the frameworks customers ask for most, including NDAA / TAA, HIPAA, CJIS, CMMC, ITAR and FedRAMP, and decide which to certify against and which to answer with documentation.
Partner with sales on customer security reviews, questionnaires and due-diligence calls, and build a trust centre and reusable answers so deals move faster.
Own data flows, retention and privacy controls for sensitive video and biometric data, including GDPR, Illinois BIPA and state-by-state retention rules.
Make compliance real: automate onboarding, offboarding and access reviews, and manage identity, SSO, MFA, device management and endpoint protection.
Own IT systems and vendors across our US, UK and India offices.
Work with engineering on security fixes and architecture changes, and lead incident response and customer communication when something goes wrong.
Build a prioritised security roadmap, report progress to leadership, and hire as the function grows.
Qualifications:
8+ years in security, compliance or IT, with ownership of a security and compliance programme at a B2B startup or scale-up.
Personally led a SOC 2 Type II audit, plus at least one more framework such as ISO 27001, HIPAA, CJIS, CMMC, ITAR or FedRAMP.
Experience selling into enterprise, government, law enforcement, defence or healthcare customers, and working closely with sales on security reviews.
Technical enough to work credibly with engineers: scripting (Python or Bash), cloud and infrastructure-as-code basics, identity platforms and device management.
Comfortable doing the detailed work yourself, from questionnaires to policies, while keeping the bigger picture in mind.
Able to explain risk clearly to non-technical people, and to push back on sales or leadership when it matters.
Experience leading or building a team is a plus, but not required.
Nice to have: biometric or video privacy experience, physical security or IoT hardware background, and certifications such as CISSP, CISM, CISA or OSCP.
Standard company text repeated across Coram AI's postings is omitted here.