Klaviyo

Klaviyo

Lead Security Compliance Engineer

Denver, CO

Sponsorship not specified$140k-$210kDetected 24 days ago
PythonSQLAWSCloud PlatformsKubernetesTerraformRESTAgentic AICybersecuritySOC OperationsComplianceCRMOnboardingCustomer SuccessHIPAACommunicationMentoringCISSP

Stay score

odds of building a lasting career here

61Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role90
Entry-level history0
PERM / green-card track0
Lottery odds (Level IV)94
Fits your clock70

Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Green-card filing pattern in this occupation

Context, not a finding about this posting: of this employer's 21 green-card filings in this occupation, 100% were for a worker who already held the job.

Green-card follow-through: 79%

Of 14 labor certifications old enough to have been used, 3 expired without the employer filing the next step. Median time from filing to decision: 494 days.100% of their filings were for a worker who already held the job.Only certifications past the 180-day window are counted — recent ones cannot have expired yet.

Files H-1B transfers

17 transfer filings in the last year, covering 17 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • If you're a close but not exact match with the description, we hope you'll still consider applying.
  • Want to learn more about life at Klaviyo?
  • We push each other to grow beyond our comfort zone, learn new things, and work hard to ensure each day is better than the last.

Responsibilities

  • Own internal and external audits and examinations end to end from scoping and readiness through fieldwork and evidence delivery; act as our primary point of contact for auditors and assessors, and develop action plans to correct findings and exceptions
  • Identify gaps against frameworks we do not yet meet, define the strategy to close them, and drive the implementation when Klaviyo takes on a new certification or regulation
  • Own security policies and standards end to end - author and maintain the policy, standard, and procedure hierarchy, decompose standards into testable requirements mapped to frameworks, and run the review, ratification, and exception management
  • Determine control design and implementation details for net-new controls, provide technical guidance to partner teams on control design best practices, and diagnose deficiencies by reviewing system configurations, technical documentation, security tool data, and occasionally application code
  • Deep experience designing, assessing, and continuously monitoring modern security and privacy controls, including determining control design for net-new controls and diagnosing deficiencies from system configurations, technical documentation, security tool data, and application code
  • Knowledge of various enterprise SaaS applications, cloud infrastructure such as AWS and Kubernetes, modern software engineering practices/tools, databases, operating systems, secure network design, and other technology relevant to cybersecurity
  • Building with agentic AI tooling (MCP, agent skills, evals and guardrails) and/or governing AI controls against ISO 42001 or NIST AI RMF

Requirements

  • Experience with GRC engineering and security automation in general, especially applying AI and automation to eliminate toil
  • Experience with SQL, building tools with REST APIs, and Python
  • We'd love to hear from you if you have most of the following:

Compensation

  • Our salary range reflects the cost of labor across various U.S. geographic markets.

Benefits

  • Define control health metrics and build the pipelines behind them from the systems we already run, so control health is a live signal rather than a quarterly assertion

Company info

  • At Klaviyo, we value the unique backgrounds, experiences and perspectives each Klaviyo (we call ourselves Klaviyos) brings to our workplace each and every day.
  • We are a team of ambitious, customer-obsessed peers who are insatiably curious and meticulous in our craft.
  • Automate and streamline our Security Trust & Compliance workflows - control testing, continuous control monitoring, evidence collection, identity governance, and security Q&As for employees and customers - with a penchant for creating excellent self-service experiences, and define new approaches, systems, and tools for the team where none exist yet

Visa & Work Authorization

  • We do not discriminate on the basis of race, ethnicity, citizenship, national origin, color, religion or religious creed, age, sex (including pregnancy), gender identity, sexual orientation, physical or mental disability
Apply directly at Klaviyo →Create a free account for alerts like thisView Klaviyo immigration profile

This listing is sourced directly from Klaviyo's careers page and normalized into a canonical job model.