Senior Security Compliance Engineer
Core
Design, build, and optimize automated solutions to streamline compliance operations, strengthen continuous control monitoring, and integrate GRC tooling across systems.
Role type
Senior Security Compliance Engineer (GRC Automation)
Builds
Automated compliance workflows, continuous control monitoring capabilities, and integrated GRC tooling for SOC 2, ISO 27001, ISO 27017, PCI, and SOX ITGCs.
Domain
B2C CRM / Ecommerce / Cloud Security / GRC
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
GRC engineering, compliance automation, scripting (Python, Go, SQL), API integration, cloud-native architecture (AWS, Kubernetes), GRC tooling (Drata, Vanta, Anecdotes), SOC 2/ISO/PCI/SOX frameworks
Preferred skills
Identity Governance (UARs, JITA), Security Operations/Engineering/Architecture, additional frameworks (ISO 27018, HIPAA, GDPR, CCPA, NIS2)
Technologies
Python, Go, SQL, AWS, Kubernetes, Drata, Vanta, Anecdotes, HyperProof, REST APIs
Responsibilities
Design and maintain automated compliance workflows using scripting and APIs; Build continuous control monitoring for real-time visibility; Partner with Security Risk to streamline compliance-to-risk operations; Implement and customize compliance automation platforms; Serve as a trusted advisor to Engineering/Product on compliance-by-design; Identify AI/automation opportunities to eliminate toil.
Seniority
Senior, hands-on IC