Security and Compliance Manager

Endex•Los Angeles, CA

1d•Onsite

About The Position

Endex is seeking a Security and Compliance Manager to own its security assurance and compliance program, including controls, audit readiness, customer diligence, and remediation tracking. The role connects security requirements to practical controls that can withstand customer scrutiny and coordinates the people and evidence needed to meet commitments. The manager works with Security Engineers on technical controls and with counsel on legal interpretation. The position is based primarily in New York City, with other listed locations in Denver, Chicago, Singapore (APAC), London, San Francisco, Austin, and Los Angeles. It requires five days in person.

Requirements

Experience assessing controls in a cloud or SaaS environment.
Ability to discuss access, infrastructure, and development controls with engineers.
Ability to prioritize gaps based on risk and operational context.
Ability to evaluate whether a record supports the claim being made.
Experience connecting policy requirements to operating controls, testing evidence, and accurately explaining results to customers or auditors.

Nice To Haves

Experience with SOC 2 or ISO 27001 assessments.
Experience with enterprise security questionnaires.
Experience with control evidence automation and AI risk frameworks.

Responsibilities

Maintain policies, controls, and evidence for the audit frameworks and customer commitments Endex chooses to support.
Coordinate evidence collection, control testing, risk assessments, and remediation, with clear owners and deadlines.
Own security diligence and questionnaire workflows, verifying answers with technical and legal owners.
Coordinate access reviews, training, vendor risk, and incident-readiness work, including AI-related risks where relevant.
Maintain an actionable risk register and report progress on control gaps and security commitments.