AssemblyAI
Security Operations Engineer
About this role
AssemblyAI seeks a Security Operations Engineer to manage day-to-day compliance and security operations for a Voice AI platform handling millions of daily API calls. You'll own SOC 2, ISO 27001, and PCI 4.0 audit cycles, run the compliance automation platform, and build tooling to reduce manual work while working closely with engineers and leadership at a lean, fast-moving company.
What you'll do
- Drive compliance audit cycles (SOC 2, ISO 27001, PCI 4.0) including evidence gathering, control documentation, and auditor coordination
- Own and maintain the Vanta compliance automation platform, monitoring control status and integration health
- Manage vendor risk reviews, third-party security assessments, and subprocessor inventories
- Respond to customer security questionnaires, RFPs, and trust-and-safety inquiries in partnership with sales and legal
- Triage vulnerabilities, prioritize remediation across teams, and track against SLAs
- Monitor security alerts from endpoint, cloud, identity, and application tools; investigate and escalate as needed
What they're looking for
- Compliance audit cycles and GRC (Governance, Risk, Compliance)
- SOC 2, ISO 27001, or PCI compliance frameworks
- Vanta or similar compliance automation platforms
- Vulnerability management and triage
- Security operations and alert response
- Scripting or automation (Python, Bash, or similar)
- Incident response and evidence collection
- Vendor risk assessment
Opens the application — the Jobs AI extension fills it for you. Set up autofill
Opens the official application on the employer’s site. No login required.
AssemblyAI
AssemblyAI builds speech AI models and solutions for developers and enterprises to integrate voice capabilities into their applications. The company is hiring for Applied AI Engineers to implement and support customer deployments, and Developer Relations Evangelists to build community engagement and evangelize its voice AI platform.
- Website
- assemblyai.com
Likely interview questions
- Walk us through your experience managing a complete SOC 2 or ISO 27001 audit cycle—what was your specific role in evidence gathering and control documentation?
- How have you used compliance automation tools like Vanta, and what challenges did you face keeping integrations healthy and controls current?