Software Compliance & Governance Engineer

Roc Search GmbH; Greater London; Hybrid; GBP 65,000 - 75,000; Full time

Job summary

A dynamic company is seeking a Software Governance and Compliance Engineer to bridge the gap between Infosec, compliance, and software development. This crucial role supports the development team in adhering to security and compliance policies, ensuring data protection, and navigating EU AI legislation. The candidate should possess a degree in Computing Science, relevant experience with SOC 2, and a strong background in security and software development, particularly with the Microsoft toolset including .NET. This position offers a competitive salary and the opportunity to contribute significantly in a remote-first work environment.

Qualifications

• Must be educated to degree level, ideally within the Computing Science arena.
• Some experience working in the software development industry is favorable.
• Heavily involved in taking an organization through SOC 2 and understanding security and compliance.

Responsibilities

• Refining and developing processes and policies for SOC2 and client contracts.
• Ensuring adherence to processes and maintaining compliance records.
• Management of resilience and monitoring tools, fixing bugs and upgrading software.

Skills

SOC 2

Audits

Security

EU AI

Software Development

.NET

Education

Degree in Computing Science

Tools

.NET Core

MS SQL

Microsoft Azure

React JS

CI/CD (Azure)

Job description

Job Title: Software Governance and Compliance Engineer
Location: London/Remote
Salary: £65,000-£75,000
Skills: SOC 2, Audits, Security, EU AI, Software Development, .NET

Roc Search's client are looking for a Software Governance and Compliance Engineer which bridges the gap between Infosec/compliance and Software Development. The applicant's priority work will be helping the Team build and adhere to the processes and policies that underpin security, resilience and compliance with client contracts and regulations.

You will be working with the Software Development team in London though this is remote first , reporting to the Head of Software Development

Responsibilities include:

• Refining and developing the processes and policies that will underpin the company's SOC2 application, client contracts and SLA's;
• Ensuring the development team adhere to these processes and policies and that all required records are kept up to date to demonstrate compliance;
• Ensuring that data protection, security and resilience are front of mind in all developments throughout the development lifecycle;
• Understanding EU AI legislation and ensuring Imparta compliance at all times;
• Playing a central role in ensuring the success of SOC 2, ISO 42001 and EU AI act audits;
• Being responsible for the day-to-day management of resilience and monitoring tools, hitting secure score targets, fixing bugs and problems, and upgrading software.
• Supporting testing activities as required by the team and to meet compliance commitments and targets;
• Supporting the software development team with project work in any remaining time.

The majority of our client's software is produced using the Microsoft toolset. Knowledge of .NET (C#), Cloud-based databases and services, Windows Services, Web Services and Web development is essential. Ideally, you will have experience or atleast an understanding in the below skillset

• C# .NET Core, Web API
• React JS, Redux, JavaScript, MVC
• MS SQL
• Microsoft Azure infrastructure knowledge
• A passion for software development
• An eagerness to constantly improve the product's performance ease of use and functionality
• Agile software development processes. A working knowledge of Scrum would be desirable.
• CI/CD (Azure)
• Unit Testing

You

• Must be educated to degree level, ideally within the Computing Science arena.
• Some experience working in the software development industry would be seen as favourable.
• You must have been heavlily involved intaking an organisation or commercial platform through SOC 2 and have a good understanding of security, resliance and SLA compliance issues in software development and operation.
• Be able to write coherent and accurate policy, process and compliance documents.
• The ability to manage your own time, prioritising tasks where necessary.
• The ability to communicate ideas clearly and concisely as well as to document tasks and processes with the target audience in mind.
• The legal right to remain and work in the United Kingdom for the next three years