Senior Staff Engineer, Cybersecurity Compliance & Assurance
Core
Lead the design, implementation, and continuous improvement of enterprise cybersecurity compliance and assurance programs, ensuring alignment with regulatory frameworks and business requirements.
Role type
Senior Staff Engineer, Cybersecurity Compliance & Assurance
Builds
Automated evidence collection, continuous control monitoring, and risk-based assessment frameworks for security domains.
Domain
Insurance / Cybersecurity Governance & Regulatory Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Cybersecurity governance, risk, and compliance (GRC); Regulatory framework expertise (NY DFS, PCI DSS, NIST CSF, CCPA/CPRA, ISO 27001, SOC 2); Multi-cloud environment management; Compliance automation; Executive reporting and metrics development; Cross-functional leadership.
Preferred skills
AI security compliance (ISO/IEC 42001, NIST AI RMF); Compliance automation platforms; Strategic roadmap development.
Technologies
Microsoft Azure, AWS, NIST Cybersecurity Framework, ISO/IEC 42001, NIST AI RMF
Responsibilities
Own and mature the enterprise cybersecurity compliance program; Lead cybersecurity compliance initiatives supporting NY DFS, PCI DSS, CCPA/CPRA, NIST CSF, SOX, HIPAA, SOC Type II, ISO 27001; Lead security attestations/certifications (SOC 2 Type II, ISO 27001); Conduct current-state and future-state assessments, compliance gap analyses, and maturity evaluations; Drive continuous audit readiness by establishing repeatable processes; Lead identification, tracking, escalation, and remediation of compliance non-adherence; Establish enterprise cybersecurity compliance metrics, key risk indicators, and executive reporting; Serve as a trusted advisor to senior leadership on cybersecurity risk and governance strategy.
Seniority
Senior Staff, hands-on IC with strategic leadership