Security & Compliance Lead

Our mission is to empower the world to design great digital experiences.

Mobbin helps designers and product people find highly-relevant references to their design problems. Today, Mobbin is serving over 3 million users and is used by most design-forward companies such as Wise, Airbnb, Headspace, Duolingo, Uber, and more.

Read more about who we are: https://careers.mobbin.com

We’re hiring a Security & Compliance Lead to work alongside our existing lead and keep Mobbin’s security, privacy and compliance programme running as the company grows quickly.

You’ll start by owning our external compliance work: enterprise contract reviews, customer security reviews, our SOC 2 audit and our public legal terms. You’ll work closely with sales, external counsel, our auditor and our insurer. You don’t need an engineering background, but you do need to be security-literate enough to ask engineers the right questions, trace a request or issue all the way through, and verify answers rather than assume them.

Together, you and your peer will cover the full programme. Your peer focuses on internal security and hardening; you focus on external compliance. You’ll each stay familiar with the other’s work so the programme never stalls when one of you is away.

Our team is small, so this is a hands-on role. You’ll help us protect customer data, meet our commitments to enterprise customers, and build security into how we develop and operate our product.

(This role starts in 2027)

• →

• A technical background, or comfort reading code, querying data and examining logs.

• Experience with cyber insurance applications, bug bounty programmes, or building a GDPR programme.

• Experience reviewing the security of AI features, MCP integrations, or other systems that connect models to customer data and tools.

• Experience configuring compliance automation platforms, identity and device management systems, or web application firewalls.

• Experience improving security incident response, running exercises, or building monitoring and evidence automation.