Director, Security Compliance and Trust

Overview

Lead Motive's security compliance, privacy and trust function as a hands-on senior leader, reporting to the CISO, building the governance, audit and certification program and the path to FedRAMP, and making Motive enterable in new international markets.

What you'll do

• Own the compliance, privacy and trust function end-to-end, including org design, hiring and global team development, and act as Motive's senior authority on the control environment.
• Build a single integrated control framework that maps once to ISO 27001/27701, SOC 1 and SOC 2, PCI DSS, FedRAMP, GDPR and CCPA/CPRA.
• Own the annual audit calendar end-to-end, manage auditor and assessor relationships directly, and lead Motive's path to FedRAMP from the ground up.
• Own privacy compliance operations, including data subject rights, DPIAs, ROPA and cross-border transfer mechanics, treating driver data as a sensitive category including location history, in-cab video, telematics behavior and biometric-adjacent processing.
• Own regulatory readiness for new markets ahead of go-to-market, partnering with Engineering and Platform on data residency and regional architecture.
• Own trust.gomotive.com, scale security questionnaire and review response, and serve as the senior escalation point in enterprise deals.
• Architect the AI-first operating model for the function, personally building evidence automation, continuous control monitoring and AI-assisted questionnaire response.
• Own the security policy and standards library and its exceptions process, along with company-wide security training, phishing simulation and human risk measurement.
• Establish Motive's AI governance program across product and internal AI use, building against ISO/IEC 42001, the NIST AI Risk Management Framework and the EU AI Act.

What you'll need

• 8+ years in security compliance, GRC, privacy, audit or risk management, including 5+ years in leadership roles managing both people managers and senior individual contributors.
• Demonstrably hands-on, having personally written policies, designed controls, built control mappings, sat through fieldwork and answered hard customer questions recently.
• Proven ownership of multi-framework compliance programs at scale in a cloud-native SaaS environment, with ISO 27001, SOC 1 and SOC 2, and PCI DSS as core.
• Deep, operational privacy experience across GDPR and CCPA/CPRA, with hands-on ownership of DSAR operations, DPIAs, ROPA and cross-border transfer mechanics.
• Concrete, demonstrated use of AI to run compliance work, including evidence collection, questionnaire response, control monitoring, policy drafting, audit preparation or regulatory gap analysis, with measurable results.
• Demonstrated ownership of customer-facing trust functions, including security reviews, questionnaires, trust portals and enterprise escalation, and experience leading globally distributed teams across multiple timezones.
• Working fluency in AI governance frameworks and a clear point of view on governing AI without blocking its adoption.

Nice to have

• CIPP/E, CIPP/US or CIPM certification.
• Experience standing up compliance and privacy in new international markets, ideally Canada, the EU, Mexico or Latin America.
• Familiarity with PIPEDA/Law 25, LGPD or the Mexican LFPDPPP.
• Experience with FedRAMP, ideally having led an organization through authorization or Moderate/High readiness.
• Experience supporting IPO readiness, SOX or equivalent regulated-environment scrutiny.
• Experience with sensitive personal data at scale.

Details

• Location: United States, remote.
• Reports to the CISO.
• Some interviews or new-hire training sessions may be held in person at one of Motive's global offices.
• Applicants must be authorized to receive and access commodities and technologies controlled under U.S. Export Administration Regulations.
• Regarding US-based roles, candidates may be required to execute a non-compete covenant, subject to exceptions and applicable statutory requirements.