Security & Compliance Manager

About the role

As our Senior Security & Compliance Engineer, you’ll own the end‑to‑end security and compliance program, set the technical direction for protecting our platform, customers and their data, and drive certification of compliance frameworks.

Key responsibilities

• Develop and maintain the governance, risk and compliance (GRC) program.
• Lead certification efforts for frameworks such as SOC 2 or ISO 27001, from gap assessment to audit.
• Harden AWS cloud infrastructure, including IAM, network segmentation, encryption and secrets management.
• Design and operate incident detection, response and post‑incident review processes.
• Respond to enterprise‑level security questionnaires, RFPs and engage with customer security teams.

Required profile

• 5+ years of experience in security with ownership of a GRC program or equivalent engineering role.
• Proven track record delivering a SOC 2, ISO 27001 or similar certification.
• Deep knowledge of privacy and data residency requirements (GDPR, DPAs, cross‑border data handling).
• Strong communication skills and ability to influence engineering and leadership.
• BS/MS in computer science, information security or related field, or equivalent experience.

Required skills

• AWS cloud security (IAM, network segmentation, encryption, secrets management).
• Solid understanding of HTTP and Linux operating systems.
• Incident detection and response experience.

What we offer

• Opportunity to grow with a small, early‑stage team building an AI‑driven construction platform.
• Equity participation as part of the compensation package.
• Focus on research and innovative problem solving for the construction industry.