coram-ai - Member of Technical Staff, Security & Compliance Lead

London, United Kingdom2w ago

In Office Staff EMEA Artificial Intelligence Internet of Things Security Management Specialist Compliance Officer B2B Reporting Bash Python Documentation

Requirements

• 8+ years in security, compliance or IT, with ownership of a security and compliance programme at a B2B startup or scale-up. • Personally led a SOC 2 Type II audit, plus at least one more framework such as ISO 27001, HIPAA, CJIS, CMMC, ITAR or FedRAMP. • Experience selling into enterprise, government, law enforcement, defence or healthcare customers, and working closely with sales on security reviews. • Technical enough to work credibly with engineers: scripting (Python or Bash), cloud and infrastructure-as-code basics, identity platforms and device management. • Comfortable doing the detailed work yourself, from questionnaires to policies, while keeping the bigger picture in mind. • Able to explain risk clearly to non-technical people, and to push back on sales or leadership when it matters. • Experience leading or building a team is a plus, but not required. • Nice to have: biometric or video privacy experience, physical security or IoT hardware background, and certifications such as CISSP, CISM, CISA or OSCP. • We're on a mission to transform a $50B+ legacy industry by bringing the power of cutting-edge multimodal LLMs and computer vision to real-world security and operations. From firearm detection to intelligent access control, our AI-native platform turns every camera and sensor into a smart system that enhances safety, efficiency, and awareness. • Founded by Ashesh Jain (ex-Lyft Level 5, PhD Cornell) and Peter Ondruska (ex-Lyft, PhD Oxford), Coram AI is backed by Ansa Capital, Battery Ventures, Mosaic, 8VC and Up Partners, have raised over $65M, and were named to the CB Insights AI 100 as one of the most promising AI companies in the world. If you're excited to work on mission-critical AI that makes an impact in the real world, we’d love to meet you.

Responsibilities

• Own our compliance programmes end to end, starting with SOC 2 Type II and ISO 27001: controls, evidence, policies, auditors and remediation. • Lead our path to the frameworks customers ask for most, including NDAA / TAA, HIPAA, CJIS, CMMC, ITAR and FedRAMP, and decide which to certify against and which to answer with documentation. • Partner with sales on customer security reviews, questionnaires and due-diligence calls, and build a trust centre and reusable answers so deals move faster. • Own data flows, retention and privacy controls for sensitive video and biometric data, including GDPR, Illinois BIPA and state-by-state retention rules. • Make compliance real: automate onboarding, offboarding and access reviews, and manage identity, SSO, MFA, device management and endpoint protection. • Own IT systems and vendors across our US, UK and India offices. • Work with engineering on security fixes and architecture changes, and lead incident response and customer communication when something goes wrong. • Build a prioritised security roadmap, report progress to leadership, and hire as the function grows.