Teams at Vercel

Manage and maintain compliance with security and privacy frameworks (ISO 27001, SOC 2, HIPAA, PCI DSS). Coordinate audits, drive remediation, improve controls and evidence management, support security questionnaires for deal cycles, and design compliance training while partnering across teams to integrate controls into the SDLC.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.