Security & Compliance Lead

About the role

Mobbin helps designers and product teams find design references, serving over 3 million users. It is hiring a Security & Compliance Lead to work alongside an existing lead and keep its security, privacy and compliance programme running as the company grows. The role starts in 2027 and covers external compliance, while the peer covers internal security and hardening.

Key responsibilities

• Review and redline enterprise customer agreements, hold standard positions, route deviations to counsel and track which MSA version each customer signed
• Triage incoming requests from sales, decline out-of-tier terms, help price higher liability caps and keep the deal tracker current
• Handle customer security questionnaires, TPRM portals and follow-ups, and check exposure when new advisories arrive
• Run the SOC 2 audit, handle insurance applications and disclosures, and brief external counsel on risk
• Keep the ToS, privacy policy, MSA and DPA current
• Handle bug bounty submissions and misuse or resale reports
• Stay familiar with the peer's internal work so either can cover the other

Required profile

• No engineering background required, but security literacy: able to ask engineers the right questions, trace issues end to end and verify answers
• Experience reviewing and negotiating customer contracts (MSAs, DPAs, security addenda)
• Experience running or supporting a SOC 2 (or similar) audit and answering enterprise security questionnaires
• Comfortable working directly with customers and legal, and juggling requests across several teams

Bonus experience

• A technical background, reading code, querying data and examining logs
• Cyber insurance applications, bug bounty programmes or a GDPR programme
• Security of AI features, MCP integrations or systems connecting models to customer data
• Compliance automation, identity and device management, or web application firewalls
• Incident response, exercises, or monitoring and evidence automation

What we offer

• Competitive salary and revenue sharing after a one-year cliff
• Flexible work hours and work from anywhere (Singapore office or remote)
• Health, medical and dental coverage, and health and fitness benefits
• Yearly company retreat and Apple equipment