Cybersecurity Compliance Engineer: PCI & GRC Leader

iSeatz, Inc.; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

iSeatz, Inc. is seeking a Cybersecurity Compliance Engineer to support the Governance, Risk, and Compliance function.

You will ensure products, systems, and processes meet regulatory, security, and compliance requirements across PCI-DSS, SOC 2, NIST, GDPR, ISO frameworks, and customer obligations. You will lead audits, coordinate evidence collection, perform vendor security reviews, and translate regulatory needs into actionable technical requirements for Engineering, DevOps, Product, and other

Qualifications

• Experience in information security, audit, compliance, or GRC related fields.
• Strong working knowledge of PCI-DSS assessments and supporting activities.
• Understanding of common security controls such as IAM, encryption, logging, and vulnerability management.
• Experience reviewing systems, processes, or third-party providers for security/compliance.
• Ability to translate regulatory requirements into clear technical and operational requirements.

Responsibilities

• Support Governance, Risk, and Compliance programs across PCI-DSS, SOC 2, NIST, GDPR, ISO.
• Lead preparation and execution of internal and external audits, including evidence collection and remediation follow-up.
• Perform security and compliance reviews of third-party vendors and service providers.
• Assist with customer security assessments and validation of contractual security requirements.
• Evaluate new technologies for security/compliance risk and provide recommendations.
• Develop and track remediation plans with control owners until closure.

Skills

Information security

Audit and compliance

GRC

Tools

Drata

Vanta

Secureframe

AuditBoard

Job description

iSeatz, Inc. is seeking a Cybersecurity Compliance Engineer to support the Governance, Risk, and Compliance function.

You will ensure products, systems, and processes meet regulatory, security, and compliance requirements across PCI-DSS, SOC 2, NIST, GDPR, ISO frameworks, and customer obligations. You will lead audits, coordinate evidence collection, perform vendor security reviews, and translate regulatory needs into actionable technical requirements for Engineering, DevOps, Product, and other