Senior Security Trust & Compliance Analyst, Klaviyo
$120-180k
3+ days a week in office
The only CRM built for B2C
Posted today
$120-180k
3+ days a week in office
1001+ employees
Company mission
Klaviyo is the only CRM built for B2C brands. Powered by its built-in data platform and AI insights, Klaviyo combines marketing automation, analytics, and customer service into one unified solution, making it easy for businesses to know their customers and grow faster.
Role
Who you are
- Experience with GRC engineering or security automation in general
- Experience designing, assessing, and continuously monitoring modern security and privacy controls based on industry standards such as NIST 800-53, CIS Critical Security Controls, ISO 27002, etc
- Experience owning or implementing security and privacy compliance audit programs for frameworks such as SOC 2, NIST CSF 2.0, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, CSA STAR, GDPR, CCPA, SOX, etc
- Knowledge of various enterprise SaaS applications, cloud infrastructure such as AWS, modern software engineering practices/tools, databases, operating systems, secure network design, and other technology relevant to cybersecurity
What the job involves
- As a Senior Security Trust & Compliance Analyst at Klaviyo, you’ll work across the organization to support and mature our customer security questionnaires and internal security audits, both of which provide assurance to our customers while also enhancing the overall security of Klaviyo
- You’ll work on translating security concepts for your fellow Klaviyos and bolster security culture throughout the company, including by helping drive our security awareness and training, phishing testing, and internal security Q&A programs
- This is your opportunity to take an active role in cybersecurity, applying and growing your expertise in security automation, risk analysis, control design, audit management, modern SaaS platform architectures, and many domains of information security (just about all of them!)
- Automate and streamline our Security Trust & Compliance workflows, including control testing, evidence collection, identity governance, and security Q&As for employees and customers, with a penchant for creating excellent self-service experiences
- Own internal and external audits or examinations preparation; coordinate with stakeholders to ensure control evidence is appropriate, and develop action plans to correct findings/exceptions
- Develop our security awareness programming, including creation of role-specific education, phishing training, and continuous education
- Mentor and train other junior members of the team
Our take
Klaviyo is a marketing firm helping growth-focused eCommerce brands drive more sales with super-targeted, highly relevant email, Facebook and Instagram marketing campaigns. From personalised newsletters to automated emails when customers abandon their shopping carts, the marketing automation platform makes it easy for businesses to capture, store, analyze, and predictively use their own data to drive measurable, high-value outcomes.
Klaviyo's CEO, Bialecki, believes that the main problem with e-mail marketing today is that there is a divide between two kinds of tools: analytics tools that help you understand what people are doing on a website, such as what products they are considering, and messaging tools that send them a marketing e-mail. Operating primarily within the retail and eCommerce industry, Klaviyo aims to solve this by offering a tool that brings together analytics and messaging. This allows companies to bring all of their first-party data into a single platform to get a deep understanding of their customers and then activate that data to deliver highly-targeted, personalised communications through email and SMS. In the process, Klaviyo's customers get a deep understanding of their consumers.
Klaviyo is a fast-growing company mainly due to its business model - the firm offers a concrete ROI for Klaviyo’s clients if the software persuades customers to make purchases by treating different types of customers differently. An IPO in 2023 has led to Klaviyo's release of Klaviyo AI, which empowers businesses to unlock revenue-driving opportunities and deliver exceptional customer experiences across channels. Still in its early days of public listing, it will be interesting to see how Klaviyo fares in the years to come.
Freddie
Company Specialist at Welcome to the Jungle
Meet the team
2 people
Meet Blake, Manager of New Hire Onboarding
Our mission
Base Camp provides a best in class onboarding program, fueled by 'just in time' learning throughout a new hires' first 100 days.Insights
Company
Employee endorsements
Opportunities to learn
"Not only we have a good stipend to spend on learning but we also have development days every quarter, where we can switch off and focus on the areas..."
Company benefits
- Private health care cover
- All full time employees receive equity
- Commuting allowance for when you do travel to the office,
- A very generous education allowance every year for you to spend on learning and development.
- Participation in Klaviyo ESPP
- Personal lifestyle allowance
- Flexible holiday scheme
Company values
- Put customers first.
- Win together.
- We’re 1% done.
- Know the score.
- Be meticulous in your craft.
- Move fast, no shortcuts.
- Drivers wanted.
- Stay hungry, stay humble.
Company HQ
Financial District, Boston, MA
Articles
Leadership
Andrew Bialecki
(CEO)Previously CTO at RockTech, Senior Engineer at Performable, Lead Engineer at Applied Predictive Technologies and an SDET Intern at Microsoft
Ed Hallen
(Chief Product Officer)Currently an Advisor at Team Engine. Previously worked in Enterprise Business Development at Google, Summer Associate at Accel-KKR and Principal at Applied Predictive Technologies.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 144 more jobs at Klaviyo