Skip to Content
On-site

Senior Compliance Engineer

Job Overview

We're looking for a Senior Compliance Engineer to own our GRC program end-to-end — audits, risk, vendor management, and policy — and to be the technical face of security and compliance to customers and prospects during due diligence.

Key points

  1. Own and operate our compliance programs (SOC 2, GDPR, HIPAA, DORA, DPDP as applicable) end-to-end — control implementation, evidence collection, and audit management.

  2. Be the primary point of contact for external auditors; manage audit timelines and evidence collection.

  3. Own the risk assessment program — identify, assess, score, track, and report risks via a risk register.

  4. Manage vendor and third-party risk assessments and due diligence.

  5. Hands-on experience running SOC 2/ISO 27001 (or similar) audits end-to-end.

  6. Strong understanding of data protection & privacy — GDPR, HIPAA, PII/PHI handling.

  7. Excellent written and verbal communication — comfortable presenting to and negotiating with external customers, auditors, and executives.

  8. Experience responding to customer security questionnaires / RFPs.

Skills

Risk ManagementCommunicationAWSETLNegotiationCustomer Success

Experience: Senior-level · 4+ years · Job type: Full-time