Staff Security Engineer

📋 Description

• Maintain and mature the ISMS, including the SoA, risk treatment plans, and MRM cadence.
• Support ISO 27001 and SOC 2 Type 2 audit execution, scope, evidence, and interviews.
• Contribute to the SOC 2 System Description and audit docs to reflect control environment.
• Track gaps and remediation from readiness assessments and audits.
• Lead policy program creation, revision, and cross-functional reviews.
• Support scaling for additional products pursuing readiness and certification.

🎯 Requirements

• 5 years in information security, GRC, or compliance roles.
• Deep familiarity with ISO 27001 and SOC 2 criteria and audits.
• Experience with ISMS breadth: SoA, MRM, system descriptions.
• Policy development with cross-functional buy-in and adoption.
• Track gaps/remediation aligning with risk and compliance programs.
• Strong cross-functional collaboration with engineers, PMs, legal, execs.

🎁 Benefits

• Generous performance bonus plans for eligible employees.
• Rich medical, dental, and vision coverage.
• Generous retirement contributions with full vesting.
• Wellness days, holidays, and birthday off.
• Home office stipend and annual professional development budget.
• Well-being stipend and extensive parental leave.