DevSecOps Platform Engineer - Security & Compliance

Validio; Stockholms kommun; Hybrid; SEK 900,000 - 1,200,000; Full time

Benefits offered by this job

Hybrid work model

Stockholm office access

Job summary

Validio is seeking a hands-on Platform Engineer focused on Security & Compliance. You will own our compliance program end to end, turning control requirements into Terraform, CI checks, and custom tests, while working alongside a tight Platform Engineering team.

You'll implement technical measures across GCP/AWS/Azure, manage security questionnaires, and drive evidence automation with Vanta or similar tools. The role is hybrid with Stockholm-office collaboration.

Qualifications

• A background in platform, DevOps, cloud, or security engineering.
• Experience owning or heavily supporting a SOC 2 and/or ISO 27001 program.
• Hands-on cloud infrastructure experience (GCP, AWS, or Azure).
• Production experience with Kubernetes, Terraform, and CI/CD.
• Go or Python for automation of platform tasks.
• Experience with a GRC automation platform (Vanta, Drata, or Secureframe).
• Clear, persuasive writing for enterprise security documentation.
• Ability to drive tasks to closure across engineering, IT, HR, and legal.

Responsibilities

• Own our compliance frameworks (SOC 2, ISO 27001, GDPR, HIPAA, DORA) and run audit cycles end to end.
• Run and automate Vanta; build tests in Go or Python and wire controls into Terraform and GitHub Actions.
• Implement technical controls across GCP, AWS, and Azure including access, logging, and secrets management.
• Own security questionnaires and our trust center, streamlining enterprise responses.
• Run vendor security reviews and DPIAs/LIAs/TRIAs with accurate risk tracking.
• Collaborate on platform and reliability improvements with the team.

Skills

Platform/DevOps background

SOC 2 / ISO 27001 program ownership

Cloud infrastructure (GCP/AWS/Azure)

Go or Python for automation

GRC automation platforms (Vanta/Drata)

Strong writing and documentation

Cross-team collaboration

Auditing liaison experience

ISO27001 Lead Implementer/Auditor cert

Education

ISO 27001 Lead Implementer / Lead Auditor certification

CISA / Security+ / CISM / CISSP certifications

Tools

Kubernetes

Terraform

CI/CD tooling

Job description

Validio is seeking a hands-on Platform Engineer focused on Security & Compliance. You will own our compliance program end to end, turning control requirements into Terraform, CI checks, and custom tests, while working alongside a tight Platform Engineering team.

You'll implement technical measures across GCP/AWS/Azure, manage security questionnaires, and drive evidence automation with Vanta or similar tools. The role is hybrid with Stockholm-office collaboration.