Own SOC 2 Type II program end-to-end (scoping, evidence, audits)
Maintain PCI DSS self-attestation and scope analysis for cardholder data
Own IT general controls supporting the SOX program (logical access, change mgmt)
Operationalize GLBA Safeguards Rule technical controls
Build policy-as-code, compliance-as-code, and AI-driven evidence automation
Primary cybersecurity audit contact for SOC 2, PCI, and customer-driven assessments

🎯 Requirements

7+ years of experience in security compliance, GRC, or technical audit (cloud-native)
End-to-end ownership of at least one SOC 2 Type II cycle
Hands-on PCI DSS experience including SAQ and scope reduction
Able to read/modify code, infrastructure-as-code, and IAM policies; Git workflows and CI/CD
Understanding of cloud infrastructure and AI-native technologies
Excellent written communication and ability to coordinate with auditors and cross-functional teams

Apply on employer's website

This employer gathers applications via their own applicant tracking system.

You will be redirected to an external application form.

Share job

Meet JobCopilot: Your Personal AI Job Hunter

Automatically Apply to Engineering Jobs. Just set your preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.

Activate JobCopilot