Remote Contract Compliance Engineer – Security & Audits

Retell; San Francisco (CA); Remote; USD 43,000 - 51,000; Full time

Job summary

Retell is seeking a Compliance Engineer (Contract) to build and own the systems that keep our security and enterprise readiness. You’ll translate compliance requirements into technical controls, automate evidence collection, and work with Engineering, Security, and Legal to support large customers.

This hands-on role covers access management, data protection, logging, vulnerability management, and audit readiness.

Qualifications

• Strong technical background in software engineering, security, infrastructure, or IT.
• Interest in compliance, security, and scalable programs.
• Willingness to learn security/compliance frameworks and translate requirements into tech solutions.
• Proficient in Python, JavaScript/TypeScript, or Bash scripting.
• Understanding IAM, encryption, networking, logging, and vulnerability management.

Responsibilities

• Build and maintain technical controls across security/compliance frameworks (SOC 2, ISO 27001, HIPAA).
• Automate compliance workflows, evidence collection, access reviews, and security checks.
• Collaborate with Engineering and Security to implement and monitor access management, data protection, logging, and vulnerability management.
• Own technical evidence collection and support audits with auditors.
• Respond to security questionnaires and assist customers with compliance diligence.
• Identify gaps and build scalable systems to improve security and compliance.

Skills

Python

JavaScript/TypeScript

Bash scripting

Security concepts

Tools

AWS

GCP

Okta

Drata

Vanta

Wiz

Job description

Retell is seeking a Compliance Engineer (Contract) to build and own the systems that keep our security and enterprise readiness. You’ll translate compliance requirements into technical controls, automate evidence collection, and work with Engineering, Security, and Legal to support large customers.

This hands-on role covers access management, data protection, logging, vulnerability management, and audit readiness.