Information Security Associate, Middesk
$90-120k
Offers equity
Business identity platform
Be an early applicant
Business identity platform
101-200 employees
Be an early applicant
$90-120k
Offers equity
101-200 employees
Company mission
To accelerate the economy by scaling trust between businesses.
Role
Who you are
- This is not a purely technical role, but it requires technical fluency and the ability to act as a liaison (and sometimes interpreter) between the technical and non-technical teams
- Experience owning or materially contributing to SOC 2 and/or ISO 27001 programs at a SaaS or data-driven company
- Hands-on experience with compliance automation tools such as Vanta, Drata, Delve, or similar
- Strong understanding of data protection concepts, vendor risk, and security controls, even if not an engineer by background
- Ability to manage multiple stakeholders, deadlines, and ambiguous requirements with good judgment
- Clear written and verbal communication skills, particularly with auditors, customers, and internal leadership
- Familiarity with privacy frameworks (e.g., GDPR, CCPA) as they intersect with security and vendor management
What the job involves
- We’re looking for a Governance, Risk & Compliance professional to own and scale Middesk’s security, privacy, and compliance programs
- This person will act as the connective tissue between engineering, legal, security, operations, and go-to-market teams—ensuring we meet customer, regulatory, and internal expectations without slowing the business down
- Own Middesk’s trust and compliance platform (currently Vanta), including continuous monitoring, evidence collection, and control maintenance
- Manage and maintain compliance with frameworks and assessments such as SOC 2, ISO 27001, and external penetration tests
- Coordinate with internal teams and external auditors to support audits and assessments end-to-end
- Maintain a current and accurate inventory of subprocessors and vendors, with particular focus on access to customer data and PII
- Partner with Legal, Ops, and Engineering to assess vendor risk and ensure appropriate controls and contractual safeguards are in place
- Own and respond to due diligence questionnaires (DDQs), security reviews, and trust-related inquiries from customers and partners
- Develop reusable artifacts and processes to streamline security and compliance reviews as Middesk scales
- Chair Middesk’s internal oversight or security committee, including agenda setting, documentation, and follow-ups
- Own the lifecycle of security and compliance policies: drafting, review, approval, rollout, and periodic refresh
- Ensure policies are aligned with actual practices and system behavior—not just “paper compliance.”
- Develop and maintain a strong understanding of Middesk’s data flows, systems, and architecture at a conceptual level
- Act as a translator between technical teams (Engineering, Security, Data) and non-technical teams (Legal, Sales, Customer Success, Operations)
- Identify gaps between how the business operates and how it is represented in compliance artifacts, and drive remediation
- Be the internal point of contact for our external IT vendor (or be the person that
Our take
Middesk helps businesses screen, verify, and run risk and compliance checks on customers and other businesses. The founders developed the business after experiencing first-hand the often laborious process of manual identity verification, a process which has proven a pain point for many businesses historically.
This hands-on experience helped land Middesk seeding from heavyweight investors Sequoia and Accel. The company's focus is on businesses with stringent regulatory risk requirements, with a special focus on businesses involved in financial aspects like credit and payroll. Middesk’s focus on this sector opens them up to a growing, lucrative market as more businesses than ever are demanding services comparable to retail banking, credit unions and community banks.
Testament to the value of their offering is Middesk’s recent partnership with challenger bank tech platform Agora Services. The challenger bank sector is taking off fast too, and if Middesk can establish a strong reputation for servicing this burgeoning industry, they stand to win big.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
3% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Jun 2022
$57m
SERIES B
Mar 2021
$16m
SERIES A
Total funding: $77.2m
Company benefits
- Healthcare: We take care of you premiums for medical, dental, and vision.
- Unlimited PTO: We have an unlimited PTO policy and encourage you actually to use it.
- Ownership: We offer a stake in the company to every full-time employee through stock options.
- 401(k): We make it easy to save money for retirement.
- Parental leave: We offer three months of paid parental leave to any parent.
- Hybrid work: We have offices in San Francisco and New York and also offer the ability to work remotely.
- Catered lunches: We offer catered lunches on days that you're in the San Francisco or New York office.
Company HQ
Financial District, San Francisco, CA
Leadership
Kyle Mack
(Co-Founder & CEO)Previously worked at AnyPerk as an Account Executive and Sales Team Lead, and at Checkr as a Sales Lead, Director of Strategic Sales, and Director of Solutions. They have served as a Scout at Sequoia Capital since 2020.
Kurt Ruppel
(Co-Founder & CTO)They studied Cognitive Science at Berkeley before working as a Software Engineer at multiple companies, including Zendesk.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 18 more jobs at Middesk