R
$210,000 – $270,000
Listed on Replit’s own careers site. You apply with them directly — we never stand between you and the employer.
What this role is
This role leads Replit's security compliance and audit program, owning certifications like SOC 2 and ISO 27001 while managing the company's risk register and continuous monitoring. It's suited to someone with deep GRC expertise who can balance audit requirements with the practical realities of an AI-native product and wants to build compliance rigor into a high-growth company.
Our summary, not Replit’s wording. The full posting is on their site.
What they ask for
Required
- 8+ years in security compliance, IT audit, or GRC roles
- Direct ownership of at least one SOC 2 and/or ISO 27001 certification cycle
- Working knowledge of SOC 2, ISO 27001, and NIST CSF frameworks
- Hands-on experience authoring or maintaining an ISMS, SSP, or equivalent audit documentation
- Experience owning a formal risk register with risk identification, scoring, treatment plans, and reporting
- Experience with GRC/compliance automation platforms and continuous control monitoring
- Direct experience managing audits end-to-end with external auditors
- Ability to read technical control evidence and discuss systems with engineers
- Working familiarity with GDPR and privacy fundamentals
Nice to have
- Experience scoping or pursuing ISO 42001 or AI governance frameworks
- Familiarity with FedRAMP or government compliance regimes
- Background in developer tools, platform, or AI/ML product companies
- Relevant certifications (CISA, CISSP, ISO 27001 Lead Auditor/Implementer)
- Experience standing up a compliance program from early or pre-certification stage