Security Trust and Assurance Manager

Join Sonar, a rapidly growing company focused on building deep trust with our customers through a top-tier security posture. As a Security Trust and Assurance Manager, you will work closely with our CISO and various teams to shape our communication about security, privacy, and compliance. Your contributions will directly impact our business growth. Responsibilities include managing customer security inquiries, collaborating with engineering and security teams, reviewing contracts, managing trust systems, and developing AI prompts. Enjoy a comprehensive benefits package, including a 401K plan, healthcare coverage, and generous time off.

• Gérer le processus de réponse aux questions de sécurité et techniques des clients et des utilisateurs internes, et améliorer le Trust Center.
• Collaborer étroitement avec les équipes d'ingénierie, de produit, de mise sur le marché et de sécurité de l'information pour traduire des détails techniques complexes en réponses claires.
• Examiner les contrats des clients, les MSA et les DPA, et fournir des commentaires, des modifications et un soutien à la négociation sur les clauses de sécurité.

• AI Proficiency: You have a proven ability to use AI tools and create complex prompts to solve tricky security problems and automate repetitive governance tasks
• Autonomous Leadership & Organizational Acumen: You have the strong organizational skills needed to juggle multiple high-stakes projects, audit reviews, and contract negotiations all at once, requiring minimal supervision to achieve broad goals
• Contract & Legal Acumen: You have solid experience reviewing, redlining, and providing feedback on security clauses and technical language in customer contracts. You are great at bridging the gap between Legal, Sales, Engineering and InfoSec
• Technical Diplomacy & Engineering Collaboration: You are a fantastic communicator! You can partner deeply with Engineering to validate technical details and then turn around and explain those complex security requirements in clear, simple business terms for non-technical peers
• Executive Presence: You are comfortable and experienced in working directly with senior leaders, especially a CISO. You know how to effectively communicate strategy, report on trust metrics, and give sound advice on risk
• Extensive Multi-Domain InfoSec Expertise: You bring deep experience across several security domains, which might include GRC, Cloud Security, IAM, or Application Security. You are also very familiar with common compliance frameworks like SOC 2, ISO 27001, and GDPR that our customers care about
• Unwavering Customer Obsession: You truly view security as a way to enable people. You are passionate about building solutions that help teams innovate and move fast without ever compromising the safety of our organization or our users