Senior Security Compliance Engineer

3–5 years of experience in security compliance, GRC engineering, security engineering, or a closely related field with a strong emphasis on automation and scalable processes

Understanding of modern cloud-native web application architectures and related security best practices, especially in the context of AWS, Kubernetes, and AI

Experience implementing and operating Compliance Automation platforms, such as Drata, Vanta, Anecdotes, HyperProof, etc.

Hands-on experience executing compliance programs for SOC 2, ISO 27001, ISO 27017, PCI, and/or SOX ITGCs

Proficiency in one or more programming/scripting languages (e.g.

Python, Go, SQL) with hands-on experience building automation for compliance workflows, integrating REST APIs, and working with GRC tooling

Security Compliance Engineer

to serve as a trusted advisor and hands-on engineer within our Security Trust & Compliance team.

You’ll design, build, and optimize automated solutions that streamline compliance operations, strengthen continuous control monitoring, and integrate GRC tooling across Klaviyo’s systems.

You’ll partner closely with cross-functional teams, such as Engineering, IT, Security, Legal, Internal Audit, and more.

You’ll help Klaviyo scale securely, sustainably deliver more value for our customers, and bolster their trust in us.

As a Senior Security Compliance Engineer, you’ll focus primarily on: