Security Engineering Technical Leader

This is a fully remote position, open to applicants in North Carolina, +2 more states.

📋 Description

• Conduct assessments to ensure readiness for the Cyber Resilience Act.

• Convert regulatory requirements into actionable technical controls, implementation strategies, and remediation priorities.

• Enhance and develop capabilities in security and compliance engineering.

• Create automated systems for evidence collection, control-as-code, dashboards, and ongoing monitoring.

• Evaluate sovereign cloud architectures, AI functionalities, data processes, and external dependencies for security, privacy, and regulatory vulnerabilities.

• Assist in audits and risk assessment reporting.

• Aid engineers in establishing enduring security and compliance methodologies.

• Collaborate with engineering, cloud infrastructure, legal, privacy, and audit teams.

• Enhance product readiness, mitigate regulatory risks, and foster trust with customers and regulators.

⛳️ Requirements

• Over 7 years of experience in security engineering, product security, cloud security, compliance engineering, GRC engineering, or a related discipline.

• Proven ability to manage intricate, multi-dimensional initiatives involving various stakeholders.

• Experience in conducting security, regulatory, and control-gap evaluations.

• Background in supporting audits, assessments, certifications, or regulatory reviews.

• Proficient in transforming regulatory or policy mandates into technical controls and quantifiable evidence.

• Familiarity with one or more of the following: EU Cyber Resilience Act, EU AI Act, GDPR and data governance principles, ISO 27001 / ISO 42001, SOC 2, NIST Cybersecurity Framework, or NIST AI RMF.

• Experience with AI/ML security, model risk management, algorithmic impact assessments, or responsible AI governance.

• Previous engagement with regulators, notified bodies, external auditors, or enterprise customer assurance teams.

• Relevant certifications like CISSP, CISM, CCSP, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent experience.

• Proficiency in software development or scripting in Python, Go, JavaScript, or similar languages.

• Capability to work autonomously across highly technical and cross-functional teams.

• Reliable internet access and the ability to operate independently in a remote setting.

🏝️ Benefits

• Medical, dental, and vision insurance.

• 401(k) plan with Cisco matching contributions.

• Paid parental leave.

• Coverage for short- and long-term disabilities.

• Basic life insurance.

• Potential availability of Cisco restricted stock unit grants.

• 10 paid holidays for each full calendar year.

• 1 floating holiday for non-exempt employees.

• Paid day off for birthdays.

• Paid shutdown during year-end holidays.

• 4 paid days off dedicated to personal wellness.

• 16 days of paid vacation each full calendar year for non-exempt full-time employees.

• Flexible vacation time off program for exempt employees.

• 80 hours of sick leave provided at the time of hire and on each January 1st thereafter.

• Up to 80 hours of unused sick leave can be carried over.

• Additional paid time off for critical family emergencies.

• Optional 10 paid volunteer days for each full calendar year.

• Annual bonuses for non-sales positions, subject to Cisco policies.