Security Compliance Analyst
$153k - $215k • San Francisco, CA • FullTime
Posted 11d ago
About the job
LangChain is seeking a Security Compliance Analyst to play a central role in building and scaling the company's privacy compliance program. This role involves developing processes, technical controls, and automation to support commitments to customers, partners, and regulators. The analyst will maintain and grow SOC 2, ISO 27001, and privacy programs, taking primary ownership of the privacy framework across multiple cloud environments and geographies. The position is based in-person in San Francisco or New York.
Responsibilities
- Build and automate the compliance operations layer, including evidence pipelines, control monitoring, and agentic systems.
- Embed security and privacy controls into products by working with Engineering on deletion pipelines, PII detection, access audit logging, and data access controls.
- Maintain and scale certification and audit programs (SOC 2, ISO 27001, ISO 27701, ISO 42001, HIPAA, GDPR, CCPA, EU-US Data Privacy Framework, etc.), driving audit readiness and evidence reuse.
- Partner with Legal on security and privacy contract execution, including DPAs, BAAs, and security addenda, by building templates and playbooks.
- Monitor adherence to security and privacy contractual obligations across all agreements.
- Contribute to the customer trust program by responding to security questionnaires, conducting due-diligence reviews, and developing trust documentation.
- Support vendor privacy risk assessments during onboarding and renewals.
Requirements
- 5+ years in privacy, GRC, or security compliance, preferably from a Big 4 firm, advisory firm, or a high-growth tech company.
- Hands-on operational experience with privacy regulations and compliance frameworks (GDPR, HIPAA, CCPA, ISO 27001, ISO 27701, SOC 2), including controls mapping, audit support, and program operations.
- Experience with DPAs and BAAs, including reviewing, negotiating, or operationalizing them.
- Technical fluency, including comfort reading code, understanding data flows, validating controls, and collaborating with engineering teams.
- Exceptional writing skills for drafting policies, responding to questionnaires, and communicating complex requirements.
Benefits
- Medical, dental, and vision coverage
- Flexible vacation
- 401(k) plan
- Meals on in-office days (US)
- Meaningful equity
- Variable compensation