Staff Security Engineer – Compliance

This is a fully remote position, open to applicants in California.

📋 Description

• Develop and take ownership of automated evidence collection systems that integrate with cloud infrastructures, identity providers, version control systems, ticketing platforms, and security tools.

• Design and execute continuous control monitoring to ensure compliance is assessed in real-time.

• Transition manual, paper-based compliance procedures into software-driven and engineering-focused solutions.

• Lead the technical strategy for upcoming certifications and regulatory standards.

• Assess new requirements and create scalable solutions that reduce operational burdens.

• Utilize LLMs and agents to correlate controls with evidence, verify evidence, and identify discrepancies.

• Oversee compliance projects including ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, SOC 2 Type 2, CSA STAR Level 2, NIST 800-171, and GDPR.

• Manage auditor relationships to facilitate smooth and compliant audit processes.

• Collaborate with stakeholders to implement compliance measures and address any findings.

• Develop and refine policies, procedures, and other compliance documentation.

• Direct the software engineering efforts behind compliance certifications and lead technical interactions with external auditors.

⛳️ Requirements

• US Citizenship is required.

• A minimum of 8 years of experience in information security roles, particularly in security compliance and risk management.

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.

• Proven experience in developing, managing, and implementing security policies and compliance frameworks such as ISO 27001, ISO 42001, NIST, GDPR, and SOC 2 Type 2.

• Strong knowledge of security principles, controls, and related technologies/products.

• Understanding of cloud security practices and compliance standards from cloud providers (AWS, Azure, GCP).

• Proficiency with AWS services.

• Excellent communication, writing, and presentation skills, able to engage a diverse group of stakeholders.

• Ability to identify security risks, implement mitigation strategies, and manage remediation from start to finish.

• Experience with both international and domestic security regulations.

🏝️ Benefits

• Flexible or remote work options available.

• A flexible and trusted distributed work environment.

• Reasonable accommodations provided during the application process.