Senior Security Engineer: Compliance & Audit Lead

EPAM Systems, Inc.; Colombia; A distancia; COP 400.080.000 - 600.120.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare benefits

Paid time off

Upskilling & certification

LinkedIn Learning access

Descripción de la vacante

EPAM Systems, Inc. is seeking a Lead Security Engineer to bridge regulatory demands and hands-on engineering. You will transform HIPAA/NIST requirements into Azure DevOps work items, drive completion, and coordinate evidence gathering for audits.

You'll collaborate across ISRM, Privacy, Legal and cloud teams to implement controls, test them, and deliver audit artifacts on time. Strong leadership and cloud security expertise required; international privacy regs knowledge a plus.

Formación

• Minimum 5 years in security/privacy compliance, GRC, or compliance engineering.
• Experience leading and managing teams (1+ year).
• Strong knowledge of HIPAA Security & Privacy Rules and NIST 800-53 families.
• Experience supporting third-party audits (SOC 2, FedRAMP, HITRUST).
• Hands-on cloud security in AWS/Azure (IAM/RBAC, encryption, logging).

Responsabilidades

• Translate regulatory text into engineering backlog with Azure DevOps.
• Monitor delivery and organize backlogs across compliance initiatives.
• Develop and run test cases for access controls and data deletion.
• Manage audit support lifecycle and evidence requests.
• Create automation scripts and dashboards to streamline audits.

Conocimientos

Security governance

HIPAA/NIST 800-53

Azure DevOps/Jira

Cloud security

Python/Bash scripting

Herramientas

SailPoint

Snyk

Qualys

Descripción del empleo

EPAM Systems, Inc. is seeking a Lead Security Engineer to bridge regulatory demands and hands-on engineering. You will transform HIPAA/NIST requirements into Azure DevOps work items, drive completion, and coordinate evidence gathering for audits.

You'll collaborate across ISRM, Privacy, Legal and cloud teams to implement controls, test them, and deliver audit artifacts on time. Strong leadership and cloud security expertise required; international privacy regs knowledge a plus.