{"id":4096140,"url":"https://alion.io/job/trigger-dev-compliance-security-lead","title":"Compliance & Security Lead","company":{"id":178239,"name":"Trigger.dev","domain":"trigger.dev","url":"https://alion.io/company/trigger-dev","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Legal","role_family":"Legal","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":{"label":"UTC-5 – UTC+1","utc_offset_min":-5,"utc_offset_max":1},"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["GB"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false},{"name":"SOC 2","optional":false},{"name":"ISO 27001","optional":true},{"name":"ISO 42001","optional":true}],"status":"live","first_seen_at":"2026-11-11T17:13:42Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T21:07:20Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About Trigger.dev\nTrigger.dev is an open source platform used by developers to build production-grade AI agents. It's an SDK and the infrastructure to run agents reliably at scale, so teams can focus on the product instead of the plumbing.\nOur Cloud product is a managed service where we deploy our users' code and auto-scale from zero to millions of executions. With the rise of AI, being able to offload async tasks reliably is a key part of any developer's toolkit: We're building the infrastructure to make that a reality.\nAbout the position\nWe're looking for our first Compliance & Security Lead to own security compliance and data protection at Trigger.dev. You'll report to the founders, and work closely with engineering.\nWe already hold SOC 2 Type II, run our program through Oneleet, and publish a trust portal covering SOC 2, GDPR and HIPAA. Until now the founders and engineers have handled compliance alongside their day jobs. As we grow, customers send more security questionnaires, ask for more reports and negotiate more DPAs. Now we need somebody to own this, keep it running all year, and free our engineers to build.\nYou don’t need to be an engineer, but technical experience is a bonus. This role suits someone process-minded who likes making compliance practical, rather than just ticking boxes.\nWhat you'll be doing\nYou'll do a variety of things including:\nRunning our SOC 2 and HIPAA programs: owning our SOC 2 audit, managing evidence collection in Oneleet and keeping us audit-ready all year\n\nUsing AI and automation to speed up compliance work, from drafting questionnaire answers to collecting evidence and reviewing policies\n\nCompleting security questionnaires and vendor assessments, sharing our reports and bridge letters, and keeping our trust portal current\n\nReviewing and negotiating DPAs with customers and suppliers, working with our lawyers, keeping our records of processing up to date and handling data subject requests under UK and EU GDPR\n\nWriting and maintaining our security, privacy and data retention policies, and making sure retention periods are enforced\n\nReviewing new tools and sub-processors before we adopt them, and keeping our sub-processor list current\n\nDeciding when we need new frameworks, such as ISO 27001 or ISO 42001 (the AI management standard), and leading the work to get there\n\nMaking compliance seamless for the team: onboarding training, simple processes and automated evidence collection wherever possible\n\nKeeping our incident response and breach notification process ready, and testing it each year\n\nRequirements\nYou really need to have:\n5+ years in security compliance, GRC or data protection, ideally at a SaaS or developer tools company\n\nExperience at an early-stage startup as the first or only compliance hire, with full ownership\n\nHands-on experience running a SOC 2 audit, from evidence collection through to the final report\n\nAn up to date working knowledge of UK and EU GDPR, and experience reviewing or negotiating DPAs\n\nExperience completing security questionnaires accurately and quickly\n\nClear, plain writing - you can turn a policy into something engineers will read\n\nEnough technical understanding to talk to engineers about cloud infrastructure, access control and logging (you don't need to write code)\n\nIf you are remote you must be within CET to ET timezones (GMT+1:00 to GMT-5:00). We will arrange 3 in-person events throughout the year\n\nYou'll be an amazing fit if you:\nHave experience with ISO 27001 or HIPAA\n\nHave used a compliance automation platform such as Oneleet, Vanta or Drata\n\nHold a privacy or security certification, such as CIPP/E, CISA or CISSP\n\nUse AI tools to speed up questionnaires, evidence review and policy work\n\nAre based in the UK and able to join the team in London\n\nAbout the team\nWe are a small team with a flat hierarchy\n\nWe encourage continuous learning and personal development\n\nEveryone operates autonomously; we trust you to get the job done, but to also quickly raise your hand if you need help\n\nWe care about our customers and the open-source community\n\nBeing a start-up, the work is challenging and fast-paced, but we also understand the importance of taking time off to recharge\n\nWorking at a Commercial Open Source Software company is more than just your day job\nOur code is public, so anyone can see how we build and run our platform. We want our security and compliance to be just as open.\n\nWe publish our security reports and trust portal, so customers can check our work instead of taking our word for it.\n\nCustomers trust us with their code and data. We’re open about how we protect it.\n\nBenefits\nGenerous compensation and equity - We hire the best talent and pay to reflect that. We also offer equity as a way to ensure everyone is invested in the success of the company.\n\nAsync working - Need a heads-down day or meeting-free days to stay productive? No problem!\n\nHome office - We will help provide equipment for a comfortable setup so you're as productive at home as you are in the office.\n\nHealth insurance - Private health insurance, with Vitality for our UK team.\n\nDog and cat friendly office - Our London office welcomes four-legged colleagues.\n\nGenerous vacation - We believe it's important to take time off. We encourage you to take your 25 days vacation excluding national holidays, plus sick leave and generous parental leave.\n\nTraining budget - An annual budget to contribute towards learning such as purchasing books, an Audible subscription or online courses.\n\nPension contributions - Enroll in our company pension scheme or we'll contribute directly to your private pension.","description_format":"text","description_chars":5620,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Equity","Generous vacation","Health insurance","Home office","Parental leave"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Developer Tools"],"lifecycle":[{"event":"open","at":"2026-11-11T21:07:20Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":33,"reasons":["conf:2","win:early"],"computed_at":"2026-11-11T23:55:41Z"},"pay":null,"html_url":"https://alion.io/job/trigger-dev-compliance-security-lead","json_url":"https://alion.io/job/trigger-dev-compliance-security-lead.json","meta":{"generated_at":"2026-11-11T23:55:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":47646,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":178239},"rest":"https://alion.io/mcp/rest/get_company?id=178239"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftrigger-dev-compliance-security-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftrigger-dev-compliance-security-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftrigger-dev-compliance-security-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/trigger-dev-compliance-security-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftrigger-dev-compliance-security-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4096140}},{"tool":"search_jobs","arguments":{"company":"trigger.dev","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4096140},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}