Security Engineering Technical Leader

This is a fully remote position, open to applicants in North Carolina.

📋 Description

• Lead assessments for readiness regarding the Cyber Resilience Act.

• Convert regulatory requirements into technical controls, actionable implementation plans, and prioritized remediation efforts.

• Develop and enhance security and compliance engineering capabilities.

• Establish automated systems for evidence collection, control-as-code, dashboards, and continuous monitoring.

• Evaluate sovereign cloud architectures, AI functionalities, data flows, and third-party dependencies for security, privacy, and regulatory risks.

• Assist in audits and risk reporting activities.

• Aid engineers in cultivating sustainable security and compliance practices.

• Collaborate with engineering, cloud infrastructure, legal, privacy, and audit teams.

• Enhance product readiness, mitigate regulatory risks, and foster confidence among customers and regulators.

⛳️ Requirements

• Over 7 years of experience in security engineering, product security, cloud security, compliance engineering, GRC engineering, or a related domain.

• Proven experience managing complex initiatives involving multiple stakeholders.

• Proficient in conducting security, regulatory, and control-gap assessments.

• Experience in supporting audits, assessments, certifications, or regulatory examinations.

• Skilled in translating regulatory or policy requirements into technical controls and measurable evidence.

• Familiarity with the EU Cyber Resilience Act.

• Knowledge of the EU AI Act.

• Understanding of GDPR and principles of data governance.

• Acquainted with ISO 27001 / ISO 42001 standards.

• Knowledgeable about SOC 2 requirements.

• Familiar with the NIST Cybersecurity Framework or NIST AI RMF.

• Preferred: experience in AI/ML security, model risk management, algorithmic impact assessments, or responsible AI governance.

• Preferred: experience collaborating with regulators, notified bodies, external auditors, or enterprise customer assurance teams.

• Preferred: relevant certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent experience.

• Preferred: software development or scripting skills in Python, Go, JavaScript, or similar programming languages.

• Ability to work autonomously across technical and cross-functional teams.

• Reliable internet access and capacity to work independently in a remote setting.

🏝️ Benefits

• Medical, dental, and vision insurance.

• 401(k) plan with a Cisco matching contribution.

• Paid parental leave.

• Coverage for short- and long-term disability.

• Basic life insurance.

• Potential Cisco restricted stock unit grants, subject to ongoing employment and vesting schedules.

• 10 paid holidays each calendar year.

• 1 floating holiday for non-exempt employees.

• 1 paid day off for the employee’s birthday.

• Paid year-end holiday shutdown.

• 4 paid days off for personal wellness.

• Non-exempt employees receive 16 days of paid vacation annually.

• Eligible exempt employees benefit from a flexible vacation time off program with no defined limit.

• 80 hours of sick time provided upon hire and each January 1 thereafter.

• Up to 80 hours of unused sick time can be carried forward each year.

• Additional paid time off for critical or emergency family matters.

• Optional 10 paid volunteer days per year.

• Annual bonuses for non-sales roles, in line with Cisco policies.