Security and Compliance Manager

Endex
New York, NY
On-siteCareer-pivot friendly

Who this role is best for

A natural match if you have experience with cloud or SaaS security compliance and a background in audit readiness.

Best fit for

  • Candidates with hands-on experience in cloud or SaaS security frameworks and audit processes
    — “You've assessed controls in a cloud or SaaS environment”
  • Individuals who can bridge technical and legal teams with clear communication and organization
    — “working with Security Engineers on technical controls and counsel on legal interpretation”
  • Professionals with a track record of managing risk registers and remediation workflows
    — “Track Risk and Follow-Through: Maintain an actionable risk register and report progress on control gaps and security commitments.”

Things to consider

  • This role requires five days of in-person work in New York City, limiting remote flexibility
    — “5 Days In-Person”
  • The position involves managing customer-facing security diligence and questionnaire workflows
    — “Support Customer Trust: Own security diligence and questionnaire workflows”

How to stand out

  • Highlight experience with maintaining policies and controls for audit frameworks
    — “Own the Assurance Program: Maintain policies, controls and evidence for the audit frameworks”
  • Emphasize your ability to coordinate cross-functional teams for audit readiness
    — “Run Audit Readiness: Coordinate evidence collection, control testing, risk assessments and remediation”
  • Showcase your ability to verify and explain security claims to auditors or customers
    — “Assurance Experience: You can connect a policy requirement to an operating control, test the evidence and explain the result accurately”
Pace · SteadyCollaboration · MediumAutonomy · MediumDecision Impact · Company

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • maintain policies and controls for audit frameworks
  • support customer diligence
Typical background
security compliance experiencetechnical understanding

Skills & requirements

Required

Security ComplianceTechnical UnderstandingRisk AssessmentAudit Readiness

Preferred

SOC 2ISO 27001Enterprise Security Questionnaires

Stack & domain

Security ComplianceCloud Or Saas EnvironmentAccess ControlsInfrastructure ControlsDevelopment ControlsRisk AssessmentProblem-solvingOperational ContextEvidence EvaluationSOC 2ISO 27001SecurityComplianceCloud Computing

About the role

Original posting from Endex via Ashby

WHO WE ARE

Endex builds AI agents that handle complex, end-to-end work for the world's most demanding teams. Today we're deployed across leading financial institutions and Fortune 500 companies, embedded in the tools and workflows they rely on. We operate at the frontier of agentic knowledge work, partnering closely with top AI research labs and backed by the OpenAI Startup Fund. We're on a mission to build the most capable digital coworker in the world.

ABOUT THE ROLE

Location: New York City

Commitment: 5 Days In-Person

We're looking for someone who can connect security requirements to controls that work in practice and stand up to customer scrutiny.

As a Security and Compliance Manager at Endex, you'll own our security assurance and compliance program: controls, audit readiness, customer diligence and remediation tracking. You'll coordinate the people and evidence needed to meet commitments, working with Security Engineers on technical controls and counsel on legal interpretation.

YOUR KEY RESPONSIBILITIES

  • Own the Assurance Program: Maintain policies, controls and evidence for the audit frameworks and customer commitments Endex chooses to support.
  • Run Audit Readiness: Coordinate evidence collection, control testing, risk assessments and remediation with clear owners and deadlines.
  • Support Customer Trust: Own security diligence and questionnaire workflows, verifying answers with technical and legal owners.
  • Build Practical Governance: Coordinate access reviews, training, vendor risk and incident-readiness work, including AI-related risks where relevant.
  • Track Risk and Follow-Through: Maintain an actionable risk register and report progress on control gaps and security commitments.

WHAT WE'RE LOOKING FOR

  • Security Compliance Experience: You've assessed controls in a cloud or SaaS environment.
  • Technical Understanding: You can discuss access, infrastructure and development controls with engineers.
  • Practical Judgment: You prioritize gaps based on risk and operational context.
  • Evidence Quality: You can evaluate whether a record supports the claim being made.
  • Assurance Experience: You can connect a policy requirement to an operating control, test the evidence and explain the result accurately to customers or auditors.

NICE TO HAVE

  • Experience with SOC 2 or ISO 27001 assessments
  • Experience with enterprise security questionnaires
  • Experience with SOC 2 or ISO 27001, control evidence automation and AI risk frameworks

FULL-TIME BENEFITS

  • Health & Dental Insurance
  • Monthly Wellness Stipend
  • 401K Matching

Source: Endex careers (Ashby)

Similar roles

More roles at Endex