Senior IT Security Compliance Engineer

About the role

The Senior IT Security Compliance Engineer will lead the development and maintenance of our security compliance posture in a fast‑growing SaaS environment. You will work closely with cross‑functional teams to ensure regulatory requirements are met, respond to customer security inquiries, and drive continuous improvement of security controls.

Key responsibilities

• Develop, review, and maintain IT security policies, standards, procedures, and guidelines aligned with industry best practices and regulations.
• Lead compliance initiatives for frameworks such as ISO 27001, SOC 2, CMMC, NIST, and internal assessments.
• Manage audit readiness, including documentation, evidence collection, stakeholder coordination, and remediation tracking.
• Respond to customer and partner security questionnaires with accurate and timely information.
• Conduct periodic security and risk assessments to evaluate control effectiveness and identify improvement opportunities.
• Track and coordinate vulnerability remediation efforts with IT, engineering, and operations teams.
• Prepare and deliver security metrics, compliance reports, and executive‑level summaries.
• Provide security awareness training and support GRC process improvement.

Required profile

• Minimum 5 years of experience in cybersecurity, information security, or compliance roles.
• Strong knowledge of information security principles, risk management, and compliance frameworks.
• Hands‑on experience supporting audits for ISO 27001, SOC 2, CMMC, NIST or similar.
• Preferred certifications: CISSP, CISA, CRISC, ISO 27001 Lead Implementer/Auditor.
• Experience in SaaS or technology‑driven environments and familiarity with cloud security principles.
• Bachelor’s degree in Computer Engineering, Computer Science, Information Security or related field.

Required skills

• ISO 27001
• SOC 2
• CMMC
• NIST framework
• Governance, Risk & Compliance (GRC) tools
• Cloud security principles