Security and Compliance Engineer

Indeo.Solutions; Deutschland; Presencial; EUR 60 000 - 85 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

30 days of paid vacation

Bi-annual company events

Opportunities for career growth

Work from anywhere

Resumo da oferta

A leading security solutions firm is seeking a Security and Compliance Engineer to help clients maintain compliance with industry standards such as PCI-DSS, ISO 27001, and HIPAA. The role involves acting as a trusted advisor during audits, implementing security best practices, and ensuring systems are secure. Ideal candidates will have strong communication skills, in-depth knowledge of compliance standards, and experience in managing audits. This is a fully remote position with generous benefits including 30 days of paid vacation.

Qualificações

• 3+ years of experience in security and compliance roles.
• Proven track record of managing audits and achieving compliance for PCI-DSS, ISO 27001, and HIPAA.
• Strong communication skills to effectively liaise with clients and auditors.

Responsabilidades

• Act as the primary representative for clients during audits.
• Design and implement security controls aligned with compliance requirements.
• Identify opportunities to enhance compliance processes.

Conhecimentos

In-depth knowledge of PCI-DSS

In-depth knowledge of ISO 27001

In-depth knowledge of HIPAA

Experience conducting audits

Proficiency in security tools and frameworks

Understanding of cloud security

Familiarity with DevOps tools

Ferramentas

SIEM solutions

Vulnerability management tools

Terraform

Kubernetes

CI/CD pipelines

Descrição da oferta de emprego

Your Role

As a Security and Compliance Engineer at Indeo Solutions, you will play a critical role in helping clients maintain compliance with industry standards, including PCI-DSS, ISO 27001, and HIPAA. You will act as a trusted advisor, guiding clients through audits, implementing security best practices, and representing them in front of auditors. Your expertise will ensure our clients’ systems are secure, compliant, and prepared for any regulatory scrutiny.

Responsibilities

Audit and Compliance:

• Act as the primary representative for clients during audits, addressing questions and presenting documentation to auditors.
• Conduct readiness assessments for PCI-DSS, ISO 27001, and HIPAA compliance.
• Work with clients to close gaps identified during audits and maintain continuous compliance.

Security Implementation:

• Design and implement security controls aligned with compliance requirements.
• Develop policies, procedures, and standards for clients to meet regulatory frameworks.
• Manage and maintain documentation to ensure up-to-date and audit-ready environments.
• Conduct risk assessments to identify vulnerabilities and non-compliance risks.
• Collaborate with engineering teams to mitigate risks and improve system security.
• Provide recommendations for secure architecture and operational practices.

Client Engagement and Advisory:

• Work closely with clients to understand their unique compliance needs and challenges.
• Provide training and guidance on compliance standards and best practices.
• Serve as a subject matter expert for compliance-related inquiries and projects.
• Stay up-to-date with the latest changes in regulatory frameworks and security trends.
• Proactively identify opportunities to enhance compliance processes and tools.
• Collaborate with internal teams to improve service offerings and client outcomes.

Qualifications

Technical Skills:

• In-depth knowledge of PCI-DSS, ISO 27001, and HIPAA standards.
• Experience conducting audits and managing end-to-end compliance processes.
• Proficiency in security tools and frameworks, such as SIEM solutions and vulnerability management tools.
• Understanding of cloud security in AWS, Azure, and GCP environments.
• Familiarity with DevOps practices and tools like Terraform, Kubernetes, and CI/CD pipelines is a plus.

Soft Skills

• Strong communication skills to effectively liaise with clients and auditors.
• Ability to simplify complex technical concepts for non-technical stakeholders.
• Exceptional problem-solving abilities with attention to detail.
• Confidence in representing clients during high-stakes audits and regulatory reviews.

Experience

• 3+ years of experience in security and compliance roles.
• Proven track record of managing audits and achieving compliance for PCI-DSS, ISO 27001, and HIPAA.
• Previous experience working in remote, distributed teams is a plus.

Why Join Us?

At Indeo Solutions, we foster a supportive and rewarding work environment where employees can thrive professionally and personally. Here’s what we offer:

• Generous Vacation: 30 days of paid vacation annually.
• Exciting Offsites: Bi-annual company events to connect and collaborate with team members.
• Challenging Projects: Work on meaningful projects that help clients succeed in highly regulated industries.
• Global Team: Join a diverse team of professionals from around the world.
• Fully Remote: Work from anywhere with no compromise on collaboration or project quality.
• Career Growth: Opportunities to deepen your expertise and expand your skills.