Principal Software Engineer - Platform Security / Compliance Architect - (Remote)

New Relic, Inc.; Montreal; Remote; CAD 100,000 - 130,000; Full time

Job summary

A leading company is seeking a Principal Software Engineer to serve as a Compliance Architect. This fully remote role involves developing compliance strategies, collaborating with cross-functional teams, and ensuring adherence to industry regulations. The ideal candidate has experience in compliance architecture and a strong understanding of DevSecOps practices. Join a diverse team that values innovation and flexibility.

Qualifications

• Several years of experience as a software engineer specializing in compliance architecture.
• Deep knowledge of regulatory compliance frameworks such as SOC 2, HIPAA, GDPR.

Responsibilities

• Develop and implement compliance strategies ensuring adherence to industry standards.
• Lead design and implementation of a security framework to protect sensitive data.

Skills

Compliance Architecture

DevSecOps

Problem Solving

Collaboration

Education

Bachelor's or Master's degree in Computer Science

Tools

Java

Golang

Security and Compliance Tools

Job description

Principal Software Engineer - Platform Security / Compliance Architect - (Remote)

Req ID: 4

Location(s): Calgary, Canada; Montreal, Canada; Ottawa, Canada; Toronto, Canada; Vancouver, Canada

Work arrangement(s): Fully Remote (works exclusively from home)

Your opportunity

At New Relic, we provide our customers real-time insights, so they can innovate faster. The Cloud Platform group within New Relic offers an enterprise-grade, cloud-agnostic platform and a developer platform that is composable, extensible, secure, scalable, and reliable. We are seeking a talented and experienced Principal Software Engineer to serve as our Compliance Architect. In this role, you will lead efforts in developing compliance strategies, establishing best practices, and designing secure solutions for our developer and cloud platforms. You will collaborate with cross-functional teams including engineering, security, legal, and compliance to ensure our software complies with industry regulations, security standards, and data privacy requirements. Your expertise in compliance frameworks and secure software development practices will be essential in maintaining customer trust and confidence.

What you'll do

1. Develop, implement, and own a comprehensive compliance strategy, ensuring adherence to industry standards, regulations, and best practices.
2. Lead the design and implementation of a robust security framework, including systems, architecture, and policies, to protect sensitive data.
3. Collaborate with engineering, security, legal, and compliance teams to integrate compliance requirements into the software development lifecycle.
4. Conduct regular compliance risk assessments and audits, developing action plans to address identified gaps.
5. Act as the engineering point of contact for internal and external auditors, providing documentation and participating in reviews.
6. Serve as a trusted advisor on compliance matters to internal stakeholders.
7. Stay updated on regulatory changes, industry standards, and emerging technologies to enhance our compliance framework.
8. Provide guidance and training on secure coding practices and compliance controls to engineering teams.

This role requires

• Bachelor's or Master's degree in Computer Science, Software Engineering, or a related field.
• Several years of experience as a software engineer specializing in compliance architecture or similar roles.
• Deep knowledge of regulatory compliance frameworks such as SOC 2, HIPAA, GDPR, FedRamp, or ISO.
• Strong understanding of DevSecOps practices and integrating security and compliance into the development lifecycle.
• Proven experience designing and implementing compliance strategies in SaaS or cloud-based companies.
• Proficiency in secure coding practices and experience with Java and/or Golang.
• Experience with security and compliance tools, frameworks, and technologies.
• Experience working in cloud environments (AWS, Azure, or GCP).
• Excellent problem-solving skills and ability to analyze complex compliance requirements.
• Strong communication and collaboration skills for effective teamwork.
• Willingness to travel domestically and internationally (up to 1 week per quarter).
• Availability to be on-call if needed.

Bonus points if you have

• Relevant certifications such as CISSP, CISA.
• Understanding of risk management principles and mitigation strategies.
• Experience with vulnerability assessments and penetration testing.
• Experience implementing identity and access management solutions.
• Knowledge of data governance frameworks and practices.

We value diversity and inclusion, encouraging everyone to bring their authentic selves to work. We support various flexible work arrangements to help our team succeed. If you need accommodations during the application process, please visit our website.

Note: We do not sponsor visas for this position. All hires must verify identity and eligibility to work. A criminal background check is required due to our data stewardship responsibilities. We consider applicants with criminal records on a case-by-case basis in accordance with applicable laws.

Headhunters and recruitment agencies are not authorized to submit resumes or CVs for this role unless contracted with us.

New Relic is an equal opportunity employer that values diversity and inclusion. We evaluate candidates solely based on qualifications, regardless of protected characteristics.

Review our Applicant Privacy Notice at