Lead Security Engineer

Lead Security Engineer | Compliance and Certification

New York City | Full-time | Senior Individual Contributor

An exciting opportunity to take ownership, build something meaningful and make a real impact.

I'm working with a rapidly growing, well-funded Cyber Security technology company looking for an experienced Lead Security Engineer to take ownership of its Corporate Security, Compliance and Certification programmes.

This isn't a traditional compliance position where you'll simply be reviewing policies and ticking boxes.

You'll have the opportunity to lead security certifications, build and improve security controls, shape how the business manages risk and work directly with senior technical leadership.

The business is scaling quickly, with a talented team, a flat hierarchy and an environment where initiative, technical expertise and fresh ideas are genuinely valued.

We're looking for someone experienced enough to take ownership, but curious and adaptable enough to do things differently.

The Opportunity

You'll take ownership of the company's security compliance and certification programmes, ensuring they meet the expectations of customers, auditors and an increasingly complex security environment.

This is a hands-on senior individual contributor role, offering significant autonomy, visibility and the chance to build processes that will grow alongside the business.

You'll work closely with engineering, security, IT and leadership teams, turning compliance requirements into practical security improvements.

What You'll Be Doing

• SOC 2 Type II: Lead audit preparation, scoping, evidence collection, control assessments, remediation and ongoing compliance.
• ISO 27001: Drive certification and ongoing compliance activities, including security controls, documentation, risk assessments and audit coordination.
• Security Frameworks: Implement, assess and maintain controls aligned with SOC 2, ISO 27001, NIST and other relevant security standards.
• Security Risk Management: Identify, assess and manage security risks, working with technical teams to implement practical solutions.
• Security Policies & Governance: Develop and improve security policies, standards, procedures and internal security documentation.
• Audit Ownership: Work directly with external auditors, coordinate stakeholders and ensure audit findings are addressed effectively.
• Third-Party Security: Support vendor risk assessments, security reviews and customer security requirements.
• Continuous Improvement: Build scalable processes, introduce improvements and help ensure security compliance keeps pace with business growth.

What We're Looking For

Essential Experience

• 5+ years' experience across Cyber Security Engineering, Corporate Security, Security Compliance or GRC, ideally within a software or technology environment.
• Proven hands-on experience leading or taking significant ownership of SOC 2 Type II and/or ISO 27001 audits and certification activities.
• Strong understanding of security controls, risk assessments, remediation and compliance frameworks, including NIST.
• Ability to translate security requirements into practical technical controls, working closely with engineering and IT teams.
• Experience building or improving security policies, processes and compliance programmes.
• Confidence working directly with auditors, technical stakeholders and senior leadership.
• Strong communication skills and the ability to manage security initiatives independently.

Just as importantly, we're looking for the right mindset.

Someone who:

• Has genuine technical and compliance experience, not just theoretical knowledge of frameworks.
• Can take ownership without needing a large team or layers of management.
• Is comfortable learning unfamiliar technologies, including bespoke internal tools.
• Can adapt quickly and find practical solutions rather than relying on rigid processes.
• Enjoys working in a fast-paced, collaborative environment with a flat hierarchy.
• Understands how to balance strong security standards with the needs of a rapidly growing business.

Why Consider This Opportunity?

Real ownership: Lead important security and certification initiatives with the autonomy to make a difference.

Build something meaningful: Help shape the company's security and compliance programmes rather than simply maintaining established processes.

Exceptional colleagues: Work alongside talented engineers and technology leaders with experience across some of the world's leading technology businesses.

High-growth environment: Join an ambitious company at an exciting stage, with significant opportunities for professional development.

Influence and visibility: Work closely with leadership and have a genuine say in how security and compliance evolve.

Equity: An opportunity to share in the future success of the business.

Interested?

If you're an experienced Security Engineer or Security Compliance professional who enjoys taking ownership, solving problems and building practical security programmes, I'd love to hear from you.

You must be based in New York or willing to relocate, with current US working rights.

• Apply now or message me directly for a confidential conversation. Fast interview process and a rare opportunity to make a genuine impact as a business scales.