Lead Security Compliance Engineer
Core
Lead Security Trust & Compliance Engineer owning internal/external audits, security policies, and continuous control monitoring for a B2C CRM platform.
Role type
Senior IC security compliance engineer (GRC & automation)
Builds
Automated control pipelines, audit evidence systems, and security policy frameworks
Domain
Cybersecurity, GRC, SaaS compliance
Required skills
Security frameworks (NIST, ISO, SOC, PCI, GDPR), audit management, policy design, control engineering, security automation, risk analysis, cloud infrastructure (AWS, Kubernetes), mentoring
Preferred skills
Compliance automation platforms (Drata, Vanta), SQL, Python, Infrastructure-as-code (Terraform, OPA), AI governance (ISO 42001, NIST AI RMF), Identity Governance
Technologies
AWS, Kubernetes, Terraform, OPA/Rego, Python, SQL, REST APIs
Responsibilities
Own internal and external audits end-to-end; define strategy for new certifications/regulations; author and maintain security policies and standards; design and monitor security controls; automate compliance workflows; identify risks and propose mitigation plans; mentor practitioners and drive technical direction
Seniority
Senior, hands-on IC with tactical leadership
