Senior Security Compliance Engineer - Remote (FedRAMP/HIPAA)

EPAM Systems Inc; España; Remote; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Private health insurance

EPAM Employees Stock Purchase Plan

100% paid sick leave

Referral Program

Professional certification

Language courses

Job summary

EPAM Systems Inc. in Spain seeks a Senior Security Compliance Engineer to join remotely.

You will translate regulatory requirements into actionable engineering work and support audits across FedRAMP, SOC 2 and HIPAA/NIST domains, enabling secure cloud delivery while maintaining program governance. The role involves collaborating with ISRM, Legal, Privacy Office, and SRE teams to align controls, test security measures, and drive continuous improvement in compliance programs within cloud

Qualifications

• 3+ years of experience in security or privacy compliance, GRC or compliance engineering roles.
• In-depth knowledge of HIPAA Security and Privacy rules and NIST 800-53 control families.
• Experience transforming regulatory language into structured, estimable backlog items in Azure DevOps or Jira.
• Proven track record supporting audits such as SOC 2, FedRAMP or HITRUST including evidence collection and auditor interactions.
• Familiarity with cloud security in AWS or Azure, including IAM/RBAC, audit logging, encryption and data lifecycle controls.
• Strong communication and stakeholder coordination skills.
• Ability to work remotely with partial US time zone overlap (until at least 11:00 AM CST).

Responsibilities

• Translate regulatory and audit requirements (HIPAA, NIST 800-53) into scoped engineering tasks with clear acceptance criteria.
• Maintain backlog hygiene across compliance initiatives for Azure DevOps/Jira features.
• Test and validate technical security controls such as access restrictions, log retention and data deletion, documenting test outcomes.
• Support third-party audits (FedRAMP, SOC 2) by mapping controls to evidence, coordinating data collection and delivering on schedule.
• Develop recurring compliance reporting and create automation scripts or dashboards for monitoring and evidence collection.
• Collaborate with ISRM, Privacy Office, Legal, SRE and platform teams to document shared versus owned controls in cloud architectures.
• Monitor progress of identified compliance gaps to ensure timely remediation.
• Assist with Significant Change Reviews (SCR) for FedRAMP and similar compliance frameworks.
• Contribute to enhancing continuous improvement of compliance programs through process refinement and tooling updates.

Skills

Strong communication

Stakeholder coordination

Remote work capability

Tools

Azure DevOps

Jira

Job description

EPAM Systems Inc. in Spain seeks a Senior Security Compliance Engineer to join remotely.

You will translate regulatory requirements into actionable engineering work and support audits across FedRAMP, SOC 2 and HIPAA/NIST domains, enabling secure cloud delivery while maintaining program governance. The role involves collaborating with ISRM, Legal, Privacy Office, and SRE teams to align controls, test security measures, and drive continuous improvement in compliance programs within cloud