1 week ago

Security & Trust Lead (USA Only - 100% Remote)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 5 hours agoStatus: Live

Job Summary

Own Close’s security and trust programs as the first full-time security governance, risk, and compliance (GRC) and internal security operator. Run Vanta day-to-day, lead SOC 2 Type 2 audits, manage frameworks like ISO 27001 and HIPAA, and automate evidence with scripts, APIs, and AI. Audit data flows to third parties, secure identity and devices (SSO/IAM, MDM, access reviews), manage incidents, and publish customer-facing trust resources.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Administration & Executive Assistance

Seniority: Mid level

Key Responsibilities

•Run the GRC program, including Vanta controls, policies, alerts, evidence, vendor reviews, and lead SOC 2 Type 2 audits and annual risk assessments.
•Automate GRC evidence and codify processes so recurring checks and evidence pulls come from code or APIs instead of manual work.
•Own how customer data moves through the stack by auditing third-party tool flows, stopping what shouldn’t, and building deletion-request processes across analytics.
•Serve as the security gate for new tools and vendors by confirming SOC 2 status, managing DPA execution, updating Vanta/subprocessor lists, and enabling safe adoption.
•Own identity and device security with SSO/IAM strategy and configuration, MDM, onboarding/offboarding security, and regular access reviews; investigate and clean up incidents.

Pay and Benefits

Perks:Paid LeaveHealth InsuranceDentalVision401kHsaFsaLong-term DisabilityParental LeaveSabbaticalRemote WorkWinter Holiday

Key Requirements

•5+ years building Security & Trust programs, including running security and compliance programs at a 50–300 person company.
•Experience configuring SSO, running access reviews, and responding to SOC 2 auditor questions.
•Strong technical understanding of systems including SSO/IAM configuration and tracing customer data flows to third-party tools.
•Ability to investigate incidents by digging through logs (e.g., Loki) and running containment/cleanup actions.
•Automation- and efficiency-minded approach using scripts, APIs, and AI to reduce manual evidence work over time.

Experience:5+ yearsSecurity & trustSOC 2Security complianceRemote teamCRM

Skills:Automation mindsetIncident investigationStakeholder communicationProcess improvementAI-positive mindset

Tech Stack:SSOIAMVantaSOC 2ISO 27001HIPAAGDPRCCPALokiScriptsAPIsAISSO/IAMMDM1Password WatchtowerAWSGoogle OAuthPen testsDPA

Company Brief

Close builds a no‑BS CRM and sales platform combining built-in calling, email sync, automation, reporting and coaching to help small businesses and startups accelerate revenue and manage pipelines more efficiently.

Industry: Enterprise Software

Company Size: Medium (51 to 250 employees)

Growth: Growth Stage Startup

Funding: Seed

Headquarters: San Francisco, United States

Founded: 2013

Glassdoor: 4.9

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.