Staff Security Engineer
Core
Maintaining and advancing Mozilla's Information Security Management System (ISMS) and supporting ISO 27001 and SOC 2 Type 2 compliance programs.
Role type
Staff Security Engineer (GRC/Compliance)
Builds
ISMS, audit readiness artifacts, security policy frameworks
Domain
Cybersecurity, Governance, Risk & Compliance
Deliverable
dashboards & analysis
Required skills
ISO 27001 expertise, SOC 2 Trust Services Criteria knowledge, ISMS lifecycle management, policy creation and revision, audit coordination, gap tracking and remediation, cross-functional stakeholder management
Preferred skills
CISA, CISSP, ISO 27001 Lead Auditor/Implementer certifications
Technologies
ISO 27001, SOC 2, ISMS frameworks
Responsibilities
Maintain and mature the ISMS including Statement of Applicability and Management Review Meetings; Support ISO 27001 and SOC 2 Type 2 audit execution; Lead the security policy program; Track gaps and remediation efforts; Partner with Engineering, IT, Legal, and Privacy teams; Advise Security leadership on compliance strategy
Seniority
Staff, hands-on IC with strategic influence