Security Trust and Assurance Manager

The primary goal of the Information Security team is to build trust with our rapidly growing customer base by ensuring the Sonar organization meets a high level of security to protect our customers. As a member of the Information Security team, you will be based in Sonar's Austin office leading the Security Governance and Customer Trust domains of our security risk management program. You will also support security incidents from time to time as needed.

Responsibilities

Manage a straightforward process for answering security and technical questions from customers and internal users; Enhance and maintain the Trust Center so it proactively answers customer questions; Collaborate with Engineering, Product, go-to-market and Information Security teams to translate technical and architectural details into clear customer responses; Review customer contracts, MSAs, and DPAs, providing feedback, redlining, and negotiation support on security clauses with Legal and Sales; Keep customer trust systems accurate and support a federated security approach across Sonar; Drive improvements and add new capabilities to trust tooling; Develop and refine prompts and automated workflows using LLMs to keep security information systems valid and up to date; Lead the Security Governance and Customer Trust domains of the security risk management program; Support security incidents as needed

Requirements

Solid experience reviewing, redlining, and providing feedback on security clauses and technical language in customer contracts; Ability to bridge the gap between Legal, Sales, Engineering and InfoSec; Strong communication skills to validate technical details with Engineering and explain security requirements in clear business terms to non-technical peers; Experience working directly with senior leaders, especially a CISO; Ability to communicate strategy, report on trust metrics, and give sound advice on risk; Deep experience across several security domains, which might include GRC, Cloud Security, IAM, or Application Security; Familiarity with common compliance frameworks such as SOC 2, ISO 27001, and GDPR; Proven ability to use AI tools and create complex prompts to solve security problems and automate governance tasks; Strong organizational skills to manage multiple high-stakes projects, audit reviews, and contract negotiations with minimal supervision; Passion for enabling teams to innovate and move fast without compromising security; Must be willing to be based in Austin, TX

Benefits

Flexible comprehensive employee benefit package; 25 days of PTO per calendar year (pro-rated based on start date), with additional time for sickness, life events and holidays; 401(k) plan with 4% match; Generous discretionary Company Growth Bonus paid annually; Fully paid parking in downtown Austin, Texas; Global workforce with employees in 20+ countries; Annual company kick-off in a different location each year; Monthly catered events and team events