Compliance & Security Lead

About Trigger.devTrigger.dev is an open source platform used by developers to build production-grade AI agents. It's an SDK and the infrastructure to run agents reliably at scale, so teams can focus on the product instead of the plumbing. Our Cloud product is a managed service where we deploy our users' code and auto-scale from zero to millions of executions. With the rise of AI, being able to offload async tasks reliably is a key part of any developer's toolkit: We're building the infrastructure to make that a reality. About the positionWe're looking for our first Compliance & Security Lead to own security compliance and data protection at Trigger.dev. You'll report to the founders, and work closely with engineering. We already hold SOC 2 Type II, run our program through Oneleet, and publish a trust portal covering SOC 2, GDPR and HIPAA. Until now the founders and engineers have handled compliance alongside their day jobs. As we grow, customers send more security questionnaires, ask for more reports and negotiate more DPAs. Now we need somebody to own this, keep it running all year, and free our engineers to build. You don’t need to be an engineer, but technical experience is a bonus. This role suits someone process-minded who likes making compliance practical, rather than just ticking boxes. What you'll be doingYou'll do a variety of things including: Running our SOC 2 and HIPAA programs: owning our SOC 2 audit, managing evidence collection in Oneleet and keeping us audit-r