Security Governance & Compliance Specialist
Core
Lead security and compliance programs, bridge security policy with engineering execution, and build automation for audit evidence collection and compliance operations.
Role type
Senior IC security governance and compliance specialist
Builds
Automated compliance solutions, audit evidence pipelines, and control integration into engineering workflows
Domain
Cloud security, technical compliance, and AI governance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
audit program leadership, control mapping, evidence collection, remediation tracking, commercial security frameworks (SOC 1/2, ISO 27001/17/18, HIPAA), cloud security (AWS/GCP/Azure), scripting/automation (Python/Go/Terraform/CloudFormation), CI/CD integration, AI governance
Preferred skills
ISO 42001, CSA STAR, PCI DSS, program management, CISA/CISSP/CISM/CRISC certifications
Technologies
Python, Go, Terraform, CloudFormation
Responsibilities
Plan and execute security audits from scoping to certification; serve as main contact for internal/external auditors; conduct gap assessments and supervise remediation; translate compliance requirements into actionable guidance for engineering teams; partner with DevOps to integrate controls into CI/CD workflows; design and run automated solutions for evidence collection and validation; support continuous monitoring; define and monitor controls for enterprise AI tools and systems.
Seniority
Senior, hands-on IC
