Staff Security Governance Engineer, Policies & Standards

📋 Description

• Own the complete lifecycle of security policies, standards, procedures, and guidelines, including
• Define and operate a risk-based exception management process covering approvals, expiration
• Manage policy attestation activities, investigate non-adherence, and develop measurable indicators
• Monitor emerging regulations and security standards, including AI-focused requirements, and
• Maintain mappings between internal policies and frameworks such as SOC 2, ISO 27001, ISO 42001
• Conduct targeted internal assessments, coordinate remediation efforts, and support audits through

🎯 Requirements

• 10+ years of experience in security governance, GRC, IT risk, or a related field, with hands-on
• Strong working knowledge of security and compliance frameworks including SOC 2, ISO 27001, ISO
• Understanding of cloud, SaaS, and DevSecOps practices, with the ability to create security policies
• Strong risk-based approach, balancing regulatory and compliance requirements with real-world
• Demonstrated experience using automation or AI to reduce manual governance, risk, and compliance
• Excellent written and verbal communication skills, with the ability to translate technical and

🎁 Benefits

• Base salary range of USD $168,000–$238,000 per year for eligible U.S.-based positions.
• Equity compensation and Employee Stock Purchase Plan.
• Benefits supporting health, finances, and overall well-being.
• Flexible Paid Time Off.
• Parental Leave.
• Growth and Development Fund to support ongoing learning and professional development.