Security & Compliance Engineer

📋 Description

• Own security and compliance across the company, incl. infra and tooling.
• Maintain ISO 27001 and SOC 2 — audits, evidence, compliance.
• Lead customer-facing security questionnaires during enterprise sales.
• Maintain security documentation: internal policies, controls, runbooks.
• Drive remediation tasks from audits and penetration tests.
• Build internal AI tooling to answer security questionnaires.

🎯 Requirements

• Bachelor’s or Master’s in Computer Science, Information Security, or equivalent.
• 4+ years in a DevOps, cloud, or security engineering role.
• Hands-on ISO 27001 or SOC 2 certification ownership.
• Independent operator across audits, controls, documentation, remediation.
• Confident representing security posture in enterprise sales conversations.
• Experience with AWS and/or GCP infrastructure security.

🎁 Benefits

• Direct ownership — single point of accountability for security and compliance.
• Work directly with the CTO on strategy, not just execution.
• Build AI-powered internal tooling to automate compliance work.
• Autonomy and ownership from day one in a fast-moving environment.
• Remote-friendly with a senior, engineering-focused culture.