Security Compliance Specialist
Core
Assess security controls against international standards (SOC 2, ISO 27001, PCI DSS) and support audits for a global technology environment supporting cloud, edge, and web security platforms.
Role type
Security Compliance Specialist II
Builds
Robust control frameworks and compliance evidence for customers and external auditors
Domain
Cybersecurity / Governance, Risk, and Compliance (GRC)
Required skills
Security control testing and evaluation, Risk analysis, Audit coordination, Technical documentation review, Remediation planning, GRC platform usage, Cloud infrastructure knowledge, Identity and Access Management (IAM), Change Management, Vulnerability Management, Logging and Monitoring
Preferred skills
CISA, CRISC, Security+, CISM, ISO Lead Auditor certifications, Containerized environments experience, Distributed systems experience
Technologies
GRC platforms, Cloud infrastructure, Containerized environments
Responsibilities
Conduct security control testing and evaluations, Assess controls against industry frameworks, Coordinate sampling populations and lead technical walkthroughs, Review technical documentation and evidence, Identify control gaps and document exceptions, Develop practical remediation plans, Support internal and third-party audits, Contribute to improving compliance processes through automation
Seniority
Mid-level (2–6 years experience), hands-on IC
