Technology Compliance Engineer

Turtle Trax S.A.; Estado de México; Híbrido; MXN 70.000 - 90.000; Jornada completa

Descripción de la vacante

A technology compliance firm seeking a highly skilled Technology Compliance Engineer for a hybrid role in Mexico. The successful candidate will be responsible for designing, implementing, and improving IT services while ensuring compliance with security frameworks. Key responsibilities include conducting audits, collaborating with departments, and maintaining security standards. Qualifications include a degree in Computer Science, 4+ years of experience in SecOps, and familiarity with AI and regulatory standards. Strong analytical skills are essential.

Formación

• 4+ years of experience in SecOps or security assessments.
• Strong experience with AI solutions.
• Experience with regulatory frameworks such as SOC 2 and NIST.

Responsabilidades

• Design and implement Enterprise IT services and solutions.
• Conduct regular security audits and reviews.
• Monitor compliance with security standards and regulatory requirements.

Conocimientos

SecOps

Application Security

Infrastructure Security

Cloud Security (AWS, Azure, GCP)

Scripting Languages (Python, Bash)

Familiarity with Containerization (Docker, Kubernetes)

Technical Input into Risk Assessments

Educación

Bachelor's degree in Computer Science or Information Security

Herramientas

Terraform

CloudFormation

Snyk

Wiz

Prisma Cloud

SonarQube

Descripción del empleo

ROLE SNAPSHOT

We are seeking a highly skilled and detail-oriented Technology Compliance Engineer to join our Risk and Security team IN MEXICO. This hybrid role combines the hands‑on engineering expertise of Enterprise solution engineering with the critical oversight of an auditor. The ideal candidate will be responsible for designing, implementing, and continuously improving Enterprise IT services and solutions while auditing systems, processes, and pipelines to ensure compliance with security and risk management requirements. This position plays a key role in ensuring that security is integrated across the Enterprise from development to deployment and operations.

KEY DUTIES

Engineering Responsibilities

• Establish and maintain Enterprise AI solutions and services.
• Champion AI use case review and enablement.
• Collaborate with all departments to successfully drive the onboarding, deployment and management of new technologies and solutions across the Enterprise.
• Maintain and improve Enterprise security requirements and oversight.

Security Responsibilities

• Conduct regular security audits and reviews of infrastructure, code repositories and deployment processes.
• Monitor compliance with internal security standards, industry best practices, and regulatory requirements (e.g., SOC 2, ISO 27001, NIST).
• Document and report findings, recommend remediation, and track resolution through completion.
• Develop and maintain security baselines, controls, and metrics for secure IT delivery.
• Provide technical input into risk assessments and contribute to threat modeling and security reviews.

Basic Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent work experience).
• 4+ years of experience in SecOps, application security, or infrastructure security.
• Strong hands‑on experience with AI solutions and .
• Familiarity with containerization and orchestration technologies (Docker, Kubernetes).
• Proficiency with scripting languages (Python, Bash, etc.) and infrastructure‑as‑code tools (Terraform, CloudFormation).
• Experience conducting audits or assessments aligned to frameworks like SOC 2, NIST, ISO 27001, or CIS Benchmarks.
• In‑depth knowledge of cloud security (AWS, Azure, or GCP) and security automation practices.
• Understanding of vulnerability management, secure coding practices, and application threat modeling.

MUST HAVE

• SOC 2
• NIST
• Technology and security assessment

PREFERRED SKILLS

• Industry certifications such as CISSP, CISA, OSCP, GIAC, or AWS/GCP Security Engineer.
• Experience assessing and governing AI services/solutions and LLM models.
• Experience with security monitoring tools (e.g., Snyk, Wiz, Prisma Cloud, SonarQube, or similar).
• Familiarity with enterprise risk management practices and GRC tools.
• Strong analytical and communication skills, with the ability to document technical issues and collaborate across teams.