Lead Security & Compliance Engineer (Audit & GRC)

EPAM Systems; Argentina; Presencial; ARS 181.190.000 - 241.586.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare benefits

Paid time off

LinkedIn Learning access

Global career opportunities

Volunteer and community involvement

Employee financial programs

Descripción de la vacante

EPAM Systems seeks a Lead Security Engineer to bridge compliance and hands-on engineering, translating regulatory language into actionable backlogs, and driving evidence gathering for external audits.

You will own audits with SOC 2, FedRAMP, HIPAA, and NIST controls, convert findings into Azure DevOps stories, coordinate across ISRM, Privacy, Legal, and cloud platform teams, and implement automated dashboards to streamline future cycles.

Formación

• 5+ years in security/privacy compliance or GRC roles.
• 1+ year of leading and managing teams.
• Experience with HIPAA and FedRAMP/NIST 800-53.
• Ability to translate regulatory text into engineering work.
• Experience supporting third-party audits (SOC 2, FedRAMP, HITRUST).
• Experience with AWS/Azure gov clouds and IAM/RBAC controls.

Responsabilidades

• Convert regulatory language into concrete backlog items with acceptance criteria.
• Monitor delivery progress and maintain backlog for compliance initiatives.
• Develop and run test cases for controls (e.g., privileged access limits, data retention).
• Manage audit support lifecycle and evidence requests with auditors.
• Generate compliance status updates and automate evidence pipelines.
• Collaborate with ISRM, Privacy, Legal, SRE, and cloud teams to document controls.

Conocimientos

HIPAA/NIST 800-53 know-how

Audit & evidence gathering

Azure DevOps

Jira

Team leadership

Compliance engineering

Cloud security controls

Communications

Herramientas

Azure DevOps

Jira

SailPoint

Descripción del empleo

EPAM Systems seeks a Lead Security Engineer to bridge compliance and hands-on engineering, translating regulatory language into actionable backlogs, and driving evidence gathering for external audits.

You will own audits with SOC 2, FedRAMP, HIPAA, and NIST controls, convert findings into Azure DevOps stories, coordinate across ISRM, Privacy, Legal, and cloud platform teams, and implement automated dashboards to streamline future cycles.