Chainguard provides trusted open source artifacts for every layer of your modern software stack—containers, language libraries, and VM images. Backed by General Catalyst, Kleiner Perkins and Lightspeed.
About the role
Chainguard is building the secure foundation for software development and deployment. Our Governance & Trust team makes sure the security practices behind that mission are effective, measurable, and worthy of our customers' trust. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- Own the third-party risk management program: vendor intake and tiering, assessments, dispositions, and the register of critical suppliers and their agreements
- Turn recurring patterns across questionnaires, audits, and vendor reviews into standing artifacts, self-serve packages, and control improvements, so the same question is answered once
- Work from a single unified controls catalog across frameworks, and push mapping and implementation defects back to the governance side rather than maintaining framework-specific lists
- Produce findings and remediation evidence that survive external re-test, and feed the corrective-action process with root causes rather than symptoms
- Guide the public-sector compliance analyst's work on assessor relationships and customer-facing federal diligence, with technical scoping decisions staying with the Head of Governance & Trust
- Mentor the analysts on the team, give and receive feedback in both directions, and help build the team as it grows
More about this role
Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk.
Our customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake.
Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital.
Chainguard is building the secure foundation for software development and deployment. Our Governance & Trust team makes sure the security practices behind that mission are effective, measurable, and worthy of our customers' trust.
We're hiring a senior practitioner to lead the compliance and trust side of that team. You'll run the execution of our external examinations (SOC 2, ISO 27001, Cyber Essentials, and a growing set of sector and regional certifications), own how we respond to customer security diligence, and run third-party risk operations. You'll lead the compliance...
Browse similar: Startup jobs · Remote jobs