Senior Security Engineer: Compliance & Audit Lead

EPAM Systems; Colombia; À distance; COP 120 000 000 - 240 000 000; Plein temps

Avantages offerts par ce poste

Healthcare benefits

Paid time off and sick leave

Upskilling and certification courses

Global career opportunities

Volunteer and community involvement

Résumé du poste

EPAM Systems, Inc. is seeking a Lead Security Engineer to bridge legal/compliance obligations and hands-on engineering.

You will translate regulatory language into actionable backlog items and drive them to completion while managing evidence for external audits. Collaborating with ISRM, Privacy, Legal, and cloud platform teams, you will ensure controls are documented, tested, and meet audit timelines across AWS/Azure Gov environments.

Qualifications

• 5+ years of security/privacy compliance, GRC, or compliance engineering experience.
• Experience leading and managing teams.
• Familiarity with HIPAA, NIST 800-53, and related controls.
• Experience supporting third-party audits (SOC 2, FedRAMP, HITRUST).

Responsabilités

• Translate regulatory/audit language into actionable backlog items with defined acceptance criteria.
• Monitor delivery and keep backlog organized across compliance initiatives.
• Develop and run tests to confirm controls operate as intended.
• Manage audit support lifecycle and evidence requests with auditors.
• Provide ongoing compliance status updates and build automation for future audits.
• Collaborate with ISRM, Privacy, Legal, and cloud teams to document inherited vs. owned controls.

Connaissances

Leadership

Security compliance

Cloud security

English comms

Outils

Azure DevOps

SailPoint

Python

Bash

Jira

Description du poste

EPAM Systems, Inc. is seeking a Lead Security Engineer to bridge legal/compliance obligations and hands-on engineering.

You will translate regulatory language into actionable backlog items and drive them to completion while managing evidence for external audits. Collaborating with ISRM, Privacy, Legal, and cloud platform teams, you will ensure controls are documented, tested, and meet audit timelines across AWS/Azure Gov environments.