Security and Compliance Manager
Endex · New York City
About this role
## Security and Compliance Manager ### Who We Are Endex builds AI agents that handle complex, end-to-end work for the world’s most demanding teams. We’re deployed across leading financial institutions and Fortune 500 companies, embedded in the tools and workflows they rely on. We operate at the frontier of agentic knowledge work, partnering with top AI research labs and backed by the OpenAI Startup Fund. ### About the Role **Location:** New York City (Primary), Denver, Chicago, Singapore (APAC), London, San Francisco, Austin, Los Angeles **Commitment:** 5 Days In-Person You’ll connect security requirements to controls that work in practice and stand up to customer scrutiny. As a **Security and Compliance Manager** at Endex, you’ll own our security assurance and compliance program, including **controls, audit readiness, customer diligence, and remediation tracking**. You’ll coordinate the people and evidence needed to meet commitments, working with **Security Engineers** on technical controls and **counsel** on legal interpretation. ### Key Responsibilities - **Own the Assurance Program:** Maintain policies, controls, and evidence for the audit frameworks and customer commitments Endex supports. - **Run Audit Readiness:** Coordinate evidence collection, control testing, risk assessments, and remediation with clear owners and deadlines. - **Support Customer Trust:** Own security diligence and questionnaire workflows, verifying answers with technical and legal owners. - **Build Practical Governance:** Coordinate access reviews, training, vendor risk, and incident-readiness work (including AI-related risks where relevant). - **Track Risk and Follow-Through:** Maintain an actionable risk register and report progress on control gaps and security commitments. ### What We’re Looking For - **Security Compliance Experience:** You’ve assessed controls in a cloud or SaaS environment. - **Technical Understanding:** You can discuss access, infrastructure, and development controls with engineers. - **Practical Judgment:** You prioritize gaps based on risk and operational context. - **Evidence Quality:** You can evaluate whether a record supports the claim being made. - **Assurance Experience:** You can connect a policy requirement to an operating control, test the evidence, and explain results accurately to customers or auditors. ### Nice to Have - Experience with **SOC 2** or **ISO 27001** assessments - Experience with **enterprise security questionnaires** - Experience with **SOC 2 / ISO 27001**, control evidence automation, and **AI risk frameworks** ### Benefits - Health & Dental Insurance - Monthly Wellness Stipend - 401K Matching
Listing freshness
CronJobs last confirmed this listing 18h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.