Lead Security Engineer: Compliance & Audit Programs

EPAM Systems, Inc.; México; A distancia; MXN 900.000 - 1.300.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare benefits

Paid time off

Upskilling & certification courses

LinkedIn Learning access

Global career opportunities

Volunteer opportunities

Descripción de la vacante

EPAM Systems, Inc. is seeking a Lead Security Engineer to bridge legal and compliance requirements with hands-on engineering. You will translate HIPAA/NIST 800-53 language into Azure DevOps items, drive completion, and gather evidence for external audits.

You will shape IAM, data retention, encryption, and log management controls, collaborating with ISRM, Privacy, Legal, and cloud platform teams to scale the program across regions and clients while maintaining clear stakeholder communications.

Formación

• 5+ years in security/privacy compliance, GRC, or compliance engineering.
• Experience leading teams and coordinating audits (SOC 2, FedRAMP, HITRUST).
• Ability to map regulatory text to engineering backlog items and backlogs in Azure DevOps/Jira.

Responsabilidades

• Convert regulatory/audit language into actionable backlog items with clear acceptance criteria and ownership.
• Monitor backlog progress and maintain alignment across access control, data classification, log scrubbing, audit logging, retention, and deletion.
• Develop and run test cases to verify controls; manage evidence for third-party audits.
• Manage end-to-end audit support lifecycle and produce status updates for stakeholders.

Conocimientos

Regulatory translation

Backlog management

Audit readiness

Stakeholder communication

Security engineering

Leadership

Test case execution

Herramientas

Azure DevOps

Jira

SailPoint

AWS GovCloud

Azure Government

Descripción del empleo

EPAM Systems, Inc. is seeking a Lead Security Engineer to bridge legal and compliance requirements with hands-on engineering. You will translate HIPAA/NIST 800-53 language into Azure DevOps items, drive completion, and gather evidence for external audits.

You will shape IAM, data retention, encryption, and log management controls, collaborating with ISRM, Privacy, Legal, and cloud platform teams to scale the program across regions and clients while maintaining clear stakeholder communications.