Principal Security & Compliance Architect

PowerToFly; Zug; Hybrid; CHF 180.000 - 260.000; Vollzeit

Benefits dieser Stelle

Hybrid work model

Mental health days off

Tuition reimbursement

Volunteer days

Zusammenfassung

Thomson Reuters is looking for a Principal Software Engineer focused on Security & Compliance to lead the technical direction for trusted AI systems. You will own the architecture and drive SOC 2, ISO, HIPAA, and FedRAMP compliance across CoCounsel infrastructures and data pipelines.

You will work with Security, Legal, Privacy, and Product to translate regulatory requirements into engineering roadmaps, implement control-based automation, and ensure scalable, auditable security across millions of

Qualifikationen

• Bachelor's degree in CS or related field.
• Hands-on production systems experience with SOC 2 Type II / ISO 27001 / HIPAA.
• FedRAMP SSP development or conformance experience (Moderate/High).
• Backend expertise in Python/Java/Go on AWS or similar cloud.
• Knowledge of NIST 800-53/NIST CSF/CIS Benchmarks and mapping controls.
• IAM at scale: SSO, SAML, OIDC, OAuth 2.0, RBAC/ABAC.

Aufgaben

• Own the compliance architecture across SOC 2, ISO 27001/42001, HIPAA, and FedRAMP.
• Build compliance as code with automated evidence collection and policy-as-code.
• Design encryption, key management, data residency, tenant isolation, and audit logging.
• Collaborate with Security, Legal, Privacy, and Product to translate requirements into roadmaps.
• Establish SLOs, observability, and incident response for compliance systems.

Kenntnisse

Python

Java

Go

AWS

Security engineering

Threat modeling

Ausbildung

Bachelor's degree in Computer Science or Computer Engineering

Certifications such as CISSP/CISM/CCSP (preferred)

Tools

Vanta

Drata

OneTrust

Jobbeschreibung

Thomson Reuters is looking for a Principal Software Engineer focused on Security & Compliance to lead the technical direction for trusted AI systems. You will own the architecture and drive SOC 2, ISO, HIPAA, and FedRAMP compliance across CoCounsel infrastructures and data pipelines.

You will work with Security, Legal, Privacy, and Product to translate regulatory requirements into engineering roadmaps, implement control-based automation, and ensure scalable, auditable security across millions of