Remote Senior Security & Compliance Engineer

EPAM Systems

España

On-site

PHP 4,357,000 - 6,536,000

Full time

3 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

Private health insurance

EPAM Employees Stock Purchase Plan

100% paid sick leave

Referral Program

Professional certification

Language courses

Job summary

EPAM Systems is seeking a Senior Security Compliance Engineer to join our team in Spain in a remote working mode. You will translate regulatory and audit requirements into actionable engineering tasks, ensure evidence collection, and support audits across FedRAMP, SOC 2, HIPAA, and NIST controls.

You will collaborate with ISRM, Privacy Office, Legal, SRE and platform teams to implement controls in cloud environments and drive continuous improvement of compliance programs, while maintaining clear

Qualifications

> 3+ years of experience in security or privacy compliance, GRC or compliance engineering roles.
> In-depth knowledge of HIPAA Security and Privacy rules and NIST 800-53 control families.
> Experience transforming regulatory language into structured, estimable backlog items in Azure DevOps or Jira.
> Proven track record supporting audits such as SOC 2, FedRAMP or HITRUST including evidence collection and auditor interactions.
> Familiarity with cloud security in AWS or Azure, including IAM/RBAC, audit logging, encryption and data lifecycle controls.
> Strong communication and stakeholder coordination skills.
> Ability to work remotely with partial US time zone overlap (until at least 11:00 AM CST).

Responsibilities

Translate regulatory and audit requirements (HIPAA, NIST 800-53) into scoped engineering tasks with clear acceptance criteria
Maintain backlog hygiene across compliance initiatives for Azure DevOps/Jira features
Test and validate technical security controls such as access restrictions, log retention and data deletion, documenting test outcomes
Support third-party audits (FedRAMP, SOC 2) by mapping controls to evidence, coordinating data collection and delivering on schedule
Develop recurring compliance reporting and create automation scripts or dashboards for monitoring and evidence collection
Collaborate with ISRM, Privacy Office, Legal, SRE and platform teams to document shared versus owned controls in cloud architectures
Monitor progress of identified compliance gaps to ensure timely remediation
Assist with Significant Change Reviews (SCR) for FedRAMP and similar compliance frameworks
Contribute to enhancing continuous improvement of compliance programs through process refinement and tooling updates