Head of Product Security

About the role

Krisp is seeking a Security Program Manager to lead its security compliance and customer assurance initiatives. The role will ensure readiness for certifications such as SOC 2 Type II, PCI DSS, HIPAA, and FedRAMP, while serving as the primary contact for customer security inquiries.

Key responsibilities

• Manage and continuously improve Krisp’s security compliance program, coordinating external audits and maintaining evidence repositories.
• Respond to customer and prospect security questionnaires, support security assessments, and maintain a reusable knowledge base of approved responses.
• Support privacy compliance efforts, including GDPR and CCPA/CPRA, and work with legal and privacy teams on data protection requirements.
• Maintain security policies, conduct risk assessments, track remediation activities, and drive governance improvements.

Required profile

• 3+ years of hands‑on experience in security compliance, GRC, or security assurance.
• Proven experience managing audits for frameworks such as SOC 2 Type II, PCI DSS, HIPAA, or FedRAMP.
• Strong project and program management skills with the ability to coordinate multiple stakeholders.
• Excellent written and verbal communication in English.

Required skills

• Identity and Access Management
• Vulnerability Management
• Change Management
• Incident Response
• Business Continuity
• Logging and Monitoring
• Encryption
• Third‑Party Risk Management
• GDPR
• CCPA/CPRA
• AWS, Azure, GCP