Compliance and Security Lead - Ada, Remote

Position summary

Ada is an AI customer service company looking for a Compliance and Security Lead to own our security compliance program end to end. In this role, you will manage audits, customer trust, vendor risk, vulnerability management, and the control framework that ties them together, positioning our team to be audit-ready year-round.

Skills and experience

We are looking for candidates with deep audit expertise and a proactive approach to security compliance programs:

• Deep audit experience across SOC 1, SOC 2, PCI DSS, NIST frameworks, AICPA standards, and PII/privacy requirements.
• Experience running audits end to end including evidence collection, control mapping, and auditor coordination.
• Experience working directly with major audit firms such as Deloitte or EY.
• Track record of inheriting manual compliance programs and driving them toward automation tooling, process, and repeatability using platforms like Drata.
• Vulnerability management at scale, driving down large backlogs through prioritization, ownership, and process.
• Customer-facing confidence in security posture conversations with enterprise prospects.
• Understanding of modern infrastructure, Kubernetes, Terraform, and CI/CD pipelines.
• Experience owning RFP security sections, customer security questionnaires, and trust centers like SafeBase.
• Strong writing skills for policies, control documentation, and data handling standards.
• Interest in regulatory and framework movement in agentic AI governance, such as AIUC.

What you'll do

As our Compliance and Security Lead, your day-to-day responsibilities and core outcomes will include the following:

• Own Ada's security audits end to end, including the upcoming AIUC audit, PCI, and SOC 2 through Drata.
• Automate evidence collection and control monitoring so audit season no longer requires seasonal scrambles.
• Own security and compliance sections of customer RFPs and security questionnaires while maintaining the SafeBase trust center.
• Manage vulnerability management as a program with clear prioritization, ownership, and SLAs.
• Run vendor security and privacy reviews as a standing process with clear SLAs.
• Maintain the control framework, policies, data retention standards, and evidence of operating controls.
• Act as the point of contact for customer security, privacy, and legal teams, serving as the internal source of truth on compliance status.
• Track regulatory and framework movement relevant to agentic AI, starting with AIUC, and translate it into internal requirements.
• Take full ownership of the AIUC audit, produce a gap assessment against target frameworks, and streamline RFP security responses in your first 90 days.

About the company

Ada is an AI customer service company on a mission to make customer service extraordinary for everyone. Established in 2016, we are a Canadian pioneer backed by over $250M in funding from tier-one investors like Accel, Bessemer, FirstMark, Spark, and Version One Ventures. We power interactions for leading brands globally, saving millions of hours of human effort.

Benefits and perks

Full-time, permanent employees enjoy a comprehensive suite of benefits designed to support well-being and growth:

• Unlimited Vacation to recharge when needed.
• Comprehensive Benefits including extended health coverage, dental, vision, travel, and life insurance.
• Wellness Account to invest in overall well-being and lifestyle.
• Employee & Family Assistance Plan to support you and your loved ones.
• Flexible Work Schedule and remote-first, in-person friendly options.
• Learning & Development Budget for long-term growth goals.
• Work from Home Budget for a seamless remote work setup.
• Access to cutting-edge AI tools and hands-on experience with LLMs.