Sr. Security Governance Engineer, Secure Build & Change
Core
Translate enterprise security policies and regulatory requirements into measurable, technically actionable controls and maintain a governance framework integrated into engineering workflows.
Role type
Senior Security Governance Engineer (Policy & Control Framework)
Builds
Version-controlled security policies, control frameworks, and governance-as-code guardrails
Domain
Information Security Governance, Cloud Security, Regulatory Compliance
Deliverable
dashboards & analysis
Required skills
Security policy design, control framework management, risk assessment, regulatory interpretation, stakeholder collaboration, documentation, cloud security knowledge, CI/CD familiarity
Preferred skills
Governance-as-Code, Policy-as-Code, OPA/Rego, HashiCorp Sentinel, YAML, JSON, Git, infrastructure-as-code, GRC platforms, OSCAL
Technologies
OPA/Rego, HashiCorp Sentinel, YAML, JSON, Git, AWS, Azure, GCP
Responsibilities
Develop and maintain security policies and technical standards; Define machine-readable policy requirements; Maintain control frameworks with traceability; Act as SME for assigned security domains; Collaborate with engineering and compliance teams
Seniority
Senior, hands-on IC
