Principal Security & Compliance Engineer – AI Trust & Scale

Thomson Reuters Foundation; Zug; Hybrid; CHF 180.000 - 240.000; Vollzeit

Benefits dieser Stelle

Hybrid Work Model

Flexible vacation

Mental Health Days

Zusammenfassung

The Thomson Reuters Foundation seeks a Principal Software Engineer specialized in Security & Compliance to define technical direction ensuring trust for law firms, corporate legal departments, and government agencies handling sensitive data.

You will own compliance architecture (SOC 2 Type II, ISO 27001, HIPAA, FedRAMP), automate evidence collection, and drive secure-by-design practices across product lines, data pipelines, and AI systems.

Qualifikationen

• Bachelor's degree in Computer Science, Computer Engineering, or related field.
• Hands-on experience building/operating production systems achieving SOC 2 Type II, ISO 27001 and HIPAA.
• Experience with FedRAMP authorization processes and 3PAO assessments.
• Deep backend engineering expertise (Python, Java, Go) on AWS or major cloud provider.
• Knowledge of NIST 800-53, NIST CSF, CIS Benchmarks; mapping to controls.
• Identity and access management at scale (SSO, SAML, OIDC, OAuth 2.0, RBAC/ABAC).
• Proven track record delivering end-to-end security/compliance initiatives; audit readiness.

Aufgaben

• Own the compliance architecture across infrastructure, data pipelines, and AI systems.
• Build compliance as code to automate evidence collection and continuous control monitoring.
• Design encryption, key management, data residency, tenant isolation, and audit logging for high-sensitivity data.
• Lead cross-functional efforts with Security, Legal, Privacy, and Product to translate requirements into roadmaps.
• Establish SLOs, observability, incident response, and internal tooling for real-time control confidence.

Kenntnisse

Security & Compliance

Backend engineering

Cloud (AWS)

Threat modeling

Incident response

Audit logging

IAM & SSO

Security controls

Encryption & key management

Security architecture

Ausbildung

Bachelor's degree in CS/CE or related field

Tools

Vanta

Drata

OneTrust

AWS

Jobbeschreibung

The Thomson Reuters Foundation seeks a Principal Software Engineer specialized in Security & Compliance to define technical direction ensuring trust for law firms, corporate legal departments, and government agencies handling sensitive data.

You will own compliance architecture (SOC 2 Type II, ISO 27001, HIPAA, FedRAMP), automate evidence collection, and drive secure-by-design practices across product lines, data pipelines, and AI systems.