Member of Technical Staff, Security & Compliance Lead

Coram AI
London, United Kingdom
On-site

Who this role is best for

Candidates with enterprise security and compliance experience and technical credibility will find this leadership role at Coram AI.

Best fit for

  • Individuals who can translate policy into automated systems and work directly with engineering leadership
    — “Make compliance real: automate onboarding, offboarding and access reviews”
  • Candidates who have worked with government, healthcare, or defense clients and understand their specific compliance needs
    — “Experience selling into enterprise, government, law enforcement, defence or healthcare customers”

Things to consider

  • This role involves direct responsibility for global IT systems and vendor management across multiple offices
    — “Own IT systems and vendors across our US, UK and India offices”
  • The candidate must be prepared to lead incident response and customer communication during security events
    — “Lead incident response and customer communication when something goes wrong”

How to stand out

  • Highlight end-to-end ownership of compliance programs in your resume and interviews
    — “Own our compliance programmes end to end, starting with SOC 2 Type II and ISO 27001”
  • Showcase your ability to work with sales teams on security reviews and due diligence processes
    — “Partner with sales on customer security reviews, questionnaires and due-diligence calls”
  • Emphasize your deep understanding of data privacy laws such as GDPR and Illinois BIPA
    — “Own data flows, retention and privacy controls for sensitive video and biometric data”
Pace · Fast PacedCollaboration · HighAutonomy · MediumDecision Impact · Company

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • owned compliance programmes
  • led customer security reviews
  • automated onboarding and access reviews
  • managed IT systems
Typical background
8+ years in security, compliance or IT, with ownership of a security and compliance programme at a B2B startup or scale-up

Skills & requirements

Required

Compliance ProgrammesCustomer Security ReviewsData FlowsIT Systems ManagementSecurity Fixes

Preferred

Biometric Or Video Privacy ExperiencePhysical Security Or Iot Hardware BackgroundCertifications Such As Cissp, Cism, CISA Or OSCP

Stack & domain

SecurityComplianceSOC 2 Type IIISO 27001HIPAACJISCMMCITARFedrampData FlowsRetentionPrivacy ControlsGDPRIllinois BIPAOnboardingOffboardingAccess ReviewsIdentitySSOMFADevice ManagementEndpoint ProtectionIT SystemsVendorsSecurity FixesArchitecture ChangesIncident ResponseCustomer CommunicationSecurity RoadmapRecruitmentLeadershipCommunicationProblem-solvingTeamworkCustomer ServiceSalesRisk ManagementCisspCISMCISAOSCPCloudAIVideo SecurityEnterpriseGovernmentLaw EnforcementDefenseHealthcare

About the role

Original posting from Coram AI via Ashby

At Coram AI, we’re reimagining video security for the modern world. Our cloud-native platform uses computer vision and AI to help businesses stay safe, make smarter decisions, and move faster; from real-time alerts to seamless clip sharing and multi-site visibility.

You’ll be joining an ambitious, fast-moving team that values clarity, craftsmanship, and impact. Every person here has a voice, ships meaningful work, and helps shape how AI can make the world safer and more connected.

The Role:

We’re hiring our first Lead Security & Compliance Engineer to own security, IT and compliance at Coram. Our customers range from police departments and federal agencies to Fortune 500 companies, schools and hospitals, across the US, UK and Canada. Every one of them asks how we protect their data. You’ll make sure compliance never blocks a deal: you’ll own our certifications, lead customer security reviews, and turn policy into real, automated controls across the company. You’ll work directly with our engineering leadership and start hands-on. As we grow, you’ll have the opportunity to build out the function and the team.

Responsibilities:

  • Own our compliance programmes end to end, starting with SOC 2 Type II and ISO 27001: controls, evidence, policies, auditors and remediation.
  • Lead our path to the frameworks customers ask for most, including NDAA / TAA, HIPAA, CJIS, CMMC, ITAR and FedRAMP, and decide which to certify against and which to answer with documentation.
  • Partner with sales on customer security reviews, questionnaires and due-diligence calls, and build a trust centre and reusable answers so deals move faster.
  • Own data flows, retention and privacy controls for sensitive video and biometric data, including GDPR, Illinois BIPA and state-by-state retention rules.
  • Make compliance real: automate onboarding, offboarding and access reviews, and manage identity, SSO, MFA, device management and endpoint protection.
  • Own IT systems and vendors across our US, UK and India offices.
  • Work with engineering on security fixes and architecture changes, and lead incident response and customer communication when something goes wrong.
  • Build a prioritised security roadmap, report progress to leadership, and hire as the function grows.

Qualifications:

  • 8+ years in security, compliance or IT, with ownership of a security and compliance programme at a B2B startup or scale-up.
  • Personally led a SOC 2 Type II audit, plus at least one more framework such as ISO 27001, HIPAA, CJIS, CMMC, ITAR or FedRAMP.
  • Experience selling into enterprise, government, law enforcement, defence or healthcare customers, and working closely with sales on security reviews.
  • Technical enough to work credibly with engineers: scripting (Python or Bash), cloud and infrastructure-as-code basics, identity platforms and device management.
  • Comfortable doing the detailed work yourself, from questionnaires to policies, while keeping the bigger picture in mind.
  • Able to explain risk clearly to non-technical people, and to push back on sales or leadership when it matters.
  • Experience leading or building a team is a plus, but not required.
  • Nice to have: biometric or video privacy experience, physical security or IoT hardware background, and certifications such as CISSP, CISM, CISA or OSCP.

We're on a mission to transform a $50B+ legacy industry by bringing the power of cutting-edge multimodal LLMs and computer vision to real-world security and operations. From firearm detection to intelligent access control, our AI-native platform turns every camera and sensor into a smart system that enhances safety, efficiency, and awareness.

Founded by Ashesh Jain (ex-Lyft Level 5, PhD Cornell) and Peter Ondruska (ex-Lyft, PhD Oxford), Coram AI is backed by Ansa Capital, Battery Ventures, Mosaic, 8VC and Up Partners, have raised over $65M, and were named to the CB Insights AI 100 as one of the most promising AI companies in the world. If you're excited to work on mission-critical AI that makes an impact in the real world, we’d love to meet you.

Source: Coram AI careers (Ashby)

Similar roles