Infra Compliance Engineer: IT Audit & Security

ITCO Solutions, Inc.; Santa Clara (CA); On-site; USD 140,000 - 180,000; Full time

Job summary

ITCO Solutions, Inc. in Santa Clara, CA is seeking an experienced IT Infrastructure Compliance Engineer to support infrastructure security, IT audits, compliance, technology risk, and third‑party partner assessments within a complex enterprise environment.

The role involves leading security audits across infrastructure, evaluating third‑party environments, and ensuring controls align with ISO 27001 and SOX/ITGC requirements, while partnering with global IT teams to mitigate risks.

Qualifications

• 8+ years of experience in IT Audit, IT Security, IT Infrastructure, or Technology Risk.
• Strong hands-on experience with Windows/Unix, virtualization, servers, and enterprise storage.
• Experience with AWS/Azure and IAM.
• Knowledge of ISO 27001, SOX/ITGC, and security controls.
• Travel up to 15–20% for domestic/international assignments.

Responsibilities

• Lead and execute IT/security audits across infrastructure, enterprise applications, and B2B integrations
• Assess third-party IT environments, security controls, data protection, and IP safeguards
• Evaluate network segmentation, access controls, APIs, and data transmission protocols
• Assess infrastructure against ISO 27001, SOX, and related compliance requirements
• Partner with networking, storage, application, and global IT teams to resolve infrastructure and security issues
• Analyze operational data and identify anomalies, control gaps, and compliance risks
• Prepare audit findings and reports for leadership and track remediation activities

Skills

IT Audit

IT Security

Technology Risk

Stakeholder management

Communication

Tools

AWS

Azure

IAM

SAP

Job description

ITCO Solutions, Inc. in Santa Clara, CA is seeking an experienced IT Infrastructure Compliance Engineer to support infrastructure security, IT audits, compliance, technology risk, and third‑party partner assessments within a complex enterprise environment.

The role involves leading security audits across infrastructure, evaluating third‑party environments, and ensuring controls align with ISO 27001 and SOX/ITGC requirements, while partnering with global IT teams to mitigate risks.