Staff Security Engineer

📋 Description

• Maintain the ISMS, including SoA, risk treatment plans, and the MRM process and cadence.
• Support ISO 27001 and SOC 2 Type 2 audits—scope, evidence, artifacts, and auditor interviews.
• Contribute to the SOC 2 System Description and other audit-specific narrative docs.
• Track gaps and remediation from readiness assessments and audits.
• Lead the policy program—drive policy creation, revision, and cross-functional reviews.
• Support compliance scaling as products/business units pursue readiness and certification.

🎯 Requirements

• 5 years of experience in information security, GRC, or compliance-focused roles.
• Deep familiarity with ISO 27001 and SOC 2 Trust Services Criteria through audits from readiness to
• Comfort operating across the full breadth of an ISMS—SoA maintenance, MRM, and System Description
• Demonstrated experience writing and revising security policies with cross-functional buy-in.
• Experience tracking gaps and remediation and linking to broader risk and compliance programs.
• Excellent cross-functional collaboration skills with engineers, product managers, legal, and exec

🎁 Benefits

• Generous performance-based bonus plans to eligible employees.
• Rich medical, dental, and vision coverage.
• Generous retirement contributions with 100% immediate vesting.
• One-time home office stipend.
• Annual professional development budget.
• Quite a bit of paid parental leave.