Compliance and Security Lead

Position:
Compliance and Security Lead

Company:
Ada

Location:
Canada (Remote)

Employment type:
Full-time

Work Arrangement:
Remote-First, In-Person Friendly

Short Summary:
As Compliance & Security Lead, you will own Ada's security compliance program, managing audits, vendor risk, and vulnerability management, ensuring the company is audit-ready year-round.

Responsibilities:
- Own Ada's security audits end to end: AIUC audit, PCI, and SOC 2.
- Automate evidence collection and control monitoring for year-round audit readiness.
- Manage security and compliance sections of customer RFPs and security questionnaires.
- Maintain the SafeBase trust center to streamline security reviews.
- Drive vulnerability management with clear prioritization and SLAs.
- Conduct vendor security and privacy reviews as a standard process.
- Serve as the point of contact for customer security, privacy, and legal teams.
- Track regulatory movements relevant to agentic AI and translate them into internal requirements.

Requirement:
- Deep audit experience across SOC 1, SOC 2, PCI DSS, NIST frameworks, and PII/privacy requirements.
- Experience with major audit firms like Deloitte or EY.
- Proven track record in automating compliance programs.
- Strong customer-facing skills and confidence in security discussions.
- Understanding of modern infrastructure, Kubernetes, Terraform, CI/CD is preferred.
- Strong writing skills for policies and documentation.

Benefits:
- Unlimited Vacation
- Comprehensive Benefits: health coverage, dental, vision, travel, and life insurance.
- Wellness Account
- Employee & Family Assistance Plan
- Flexible Work Schedule
- Learning & Development Budget
- Work from Home Budget
- Access to Cutting-Edge AI Tools
- Hands-On with LLMs