S

Sonar

Code quality and security analysis tools

Security Trust and Assurance Manager

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeAustin, TX, USA

About the Job

Requirements

  • Experience reviewing, redlining, and providing feedback on security clauses and technical language in customer contracts.
  • Ability to collaborate with Legal, Sales, Engineering, and Information Security teams.
  • Ability to validate technical details with Engineering and explain complex security requirements in clear business terms to non-technical colleagues.
  • Experience working directly with senior leaders, especially a CISO, communicating strategy, reporting trust metrics, and advising on risk.
  • Deep experience across multiple information security domains, which may include governance, risk, and compliance; cloud security; identity and access management; or application security.
  • Familiarity with compliance frameworks such as SOC 2, ISO 27001, and GDPR.
  • Ability to use AI tools and create complex prompts to solve security problems and automate governance tasks.
  • Organizational skills to manage multiple high-stakes projects, audit reviews, and contract negotiations with minimal supervision.

Responsibilities

  • Manage a process for answering security and technical questions from customers and internal users.
  • Enhance and maintain the Trust Center so it proactively answers customer questions and serves as a resource.
  • Collaborate with Engineering, Product, go-to-market, and Information Security teams to translate complex technical and architectural details into accurate, clear responses for customers.
  • Review customer contracts, master services agreements, and data processing agreements; partner with Legal and Sales to provide feedback, redlining, and negotiation support on security clauses, ensuring alignment with company capabilities and risk appetite.
  • Maintain accurate customer trust systems and support a federated security approach across the company.
  • Drive improvements and add capabilities to trust-system tooling.
  • Develop and refine prompts and automated workflows using large language models to keep security information systems valid and up to date.

About the Company

Sonar

Code quality and security analysis tools

SonarSource provides tools that help developers improve code quality and security. Its products include SonarLint (an IDE plugin that gives real-time feedback), SonarQube (a self-hosted code analysis and reporting platform), and SonarCloud (a cloud-based service with similar analysis and governance). The tools analyze code for bugs, vulnerabilities, and maintainability issues and offer guidance to fix them; SonarLint gives instant feedback in the IDE, while SonarQube and SonarCloud offer deeper analysis and dashboards for teams. The goal is to help teams keep code clean, secure, and reliable by supporting a broad, subscription-based suite used by thousands of organizations.

Company size
1,001-5,000
Company stage
Late Stage VC
Total funding
$457.1M
Headquarters
Vernier, Switzerland
Founded
2008

Recently Posted Jobs

Explore more opportunities at Sonar

See more jobs