Compliance & Trust Lead

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee and enhance Linear's compliance program from start to finish — manage and improve our SOC 2 Type II, ISO 27001, and other pertinent certifications (future roadmap includes ISO 27701, ISO 42001) while minimizing audit burden and automating evidence collection as much as possible.

• Serve as the main contact for security questionnaires, customer trust assessments, and enterprise procurement discussions — transform often cumbersome processes into a competitive edge.

• Lead our risk management initiative — pinpoint emerging risks within the product, infrastructure, and vendor ecosystem, drive remediation efforts with appropriate stakeholders, and provide clear insights to leadership.

• Collaborate closely with engineering to integrate compliance controls into our development practices — influence policy and tools so that security requirements are considered early in the development cycle, rather than as an afterthought.

• Oversee our third-party risk management program — assess vendors and subprocessors, maintain our vendor inventory, and ensure our supply chain adheres to the standards we set for security and privacy.

• Contribute to the scaling of the GRC function through automation — minimize manual tasks, establish sustainable processes, and ensure the program evolves alongside the business without a proportional increase in headcount.

⛳️ Requirements

• An experienced GRC professional — you possess over 7 years in compliance and customer trust, preferably within a B2B SaaS or developer tools setting, and have navigated enough audit cycles to recognize potential pitfalls.

• Knowledgeable in frameworks and privacy — you have extensive hands-on experience with SOC 2 and ISO 27001, comprehend how privacy laws like GDPR and CCPA relate to security controls, and can analyze new frameworks from foundational principles.

• A creator, not merely an executor — you view manual compliance tasks as challenges to be innovated away, prioritize scalable processes over manual efforts, and have utilized tools such as Vanta, Drata, or similar platforms to achieve this.

• A reliable collaborator, both internally and externally — you engage effectively with engineering, legal, and customers; you can articulate a control design to a skeptical customer, draft a concise policy, and compose a risk summary that leadership will actually review.

• Independent and self-directed — you are comfortable working autonomously, establishing your own priorities, and knowing when to involve leadership, without requiring close management.

• Practical rather than procedural — you focus on mitigating real risks rather than merely fulfilling checklists, and you understand the distinction.

🏝️ Benefits

• Competitive salary and equity options.

• Employee-friendly equity arrangements, including early exercise in the US and extended exercise periods.

• Daily meal and coffee stipend for every workday.

• Paid coworking space or desk access.

• Health insurance coverage (depending on country regulations).

• 5 weeks of paid vacation, in addition to local statutory holidays.

• 4 months of paid parental leave.

• A paid month off after 4 years of service and every 2 years thereafter.

• Regular team gatherings and off-site events.

• Remote-first work environment with no mandatory commute.