Remote Senior Security & Compliance Engineer

EPAM Systems; España; A distancia; PHP 4.357.000 - 6.536.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Private health insurance

EPAM Employees Stock Purchase Plan

100% paid sick leave

Referral Program

Professional certification

Language courses

Descripción de la vacante

EPAM Systems is seeking a Senior Security Compliance Engineer to join our team in Spain in a remote working mode. You will translate regulatory and audit requirements into actionable engineering tasks, ensure evidence collection, and support audits across FedRAMP, SOC 2, HIPAA, and NIST controls.

You will collaborate with ISRM, Privacy Office, Legal, SRE and platform teams to implement controls in cloud environments and drive continuous improvement of compliance programs, while maintaining clear

Formación

• > 3+ years of experience in security or privacy compliance, GRC or compliance engineering roles.
• > In-depth knowledge of HIPAA Security and Privacy rules and NIST 800-53 control families.
• > Experience transforming regulatory language into structured, estimable backlog items in Azure DevOps or Jira.
• > Proven track record supporting audits such as SOC 2, FedRAMP or HITRUST including evidence collection and auditor interactions.
• > Familiarity with cloud security in AWS or Azure, including IAM/RBAC, audit logging, encryption and data lifecycle controls.
• > Strong communication and stakeholder coordination skills.
• > Ability to work remotely with partial US time zone overlap (until at least 11:00 AM CST).

Responsabilidades

• Translate regulatory and audit requirements (HIPAA, NIST 800-53) into scoped engineering tasks with clear acceptance criteria
• Maintain backlog hygiene across compliance initiatives for Azure DevOps/Jira features
• Test and validate technical security controls such as access restrictions, log retention and data deletion, documenting test outcomes
• Support third-party audits (FedRAMP, SOC 2) by mapping controls to evidence, coordinating data collection and delivering on schedule
• Develop recurring compliance reporting and create automation scripts or dashboards for monitoring and evidence collection
• Collaborate with ISRM, Privacy Office, Legal, SRE and platform teams to document shared versus owned controls in cloud architectures
• Monitor progress of identified compliance gaps to ensure timely remediation
• Assist with Significant Change Reviews (SCR) for FedRAMP and similar compliance frameworks
• Contribute to enhancing continuous improvement of compliance programs through process refinement and tooling updates

Conocimientos

Security compliance

GRC experience

Stakeholder coordination

Herramientas

Azure DevOps

Jira

Snyk

Wiz

Qualys

Descripción del empleo

EPAM Systems is seeking a Senior Security Compliance Engineer to join our team in Spain in a remote working mode. You will translate regulatory and audit requirements into actionable engineering tasks, ensure evidence collection, and support audits across FedRAMP, SOC 2, HIPAA, and NIST controls.

You will collaborate with ISRM, Privacy Office, Legal, SRE and platform teams to implement controls in cloud environments and drive continuous improvement of compliance programs, while maintaining clear