Owner of Close’s security, privacy, and compliance program: run and automate GRC (Vanta, SOC 2 Type II, risk assessments, evaluate ISO/HIPAA), audit and vendor reviews, investigate incidents, manage SSO/IAM and MDM, and coordinate product security audits. Role is hands-on and automation-focused; requires 5+ years building security & trust programs and is US-only, 100% remote.