Remote Security GRC Engineer: Automate Audits & Compliance

Pazau, Inc.; San Francisco (CA); Remote; USD 185.000 - 230.000; Vollzeit

Benefits dieser Stelle

Equity in Pazau

4 weeks paid time off

16 weeks parental leave

401(k) with 4% match

Medical, dental and vision insurance

Zusammenfassung

Pazau, Inc. is seeking a security compliance engineer in the San Francisco area or fully remote within the United States.

The role focuses on running and automating SOC 2 Type II and ISO audits, with a hands-on engineering approach to controls as code and evidence collection. You will automate evidence gathering from major platforms, maintain industry-standard questionnaires, and lead vendor risk reviews while aligning with evolving frameworks like the EU AI Act and DORA.

Qualifikationen

• 4+ years in security compliance, GRC or security engineering at a SaaS company.
• Hands-on experience leading SOC 2 and ISO 27001 audits.
• Ability to write small scripts (Python) or policy-as-code (Terraform).
• Judgment on effective controls vs. auditor questions.

Aufgaben

• Own SOC 2 Type II and ISO audits and audit-firm relationships.
• Automate evidence collection from AWS, Okta, GitHub and CI/CD pipelines.
• Maintain CAIQ/HECVAT and standard security questionnaire answers for enterprise deals.
• Run vendor risk reviews with the DPO on 30-day notice process.
• Map new frameworks (EU AI Act, DORA) to our control set as customers request.

Kenntnisse

SOC 2 audits

ISO 27001 audits

Python scripting

Terraform policy

Jobbeschreibung

Pazau, Inc. is seeking a security compliance engineer in the San Francisco area or fully remote within the United States.

The role focuses on running and automating SOC 2 Type II and ISO audits, with a hands-on engineering approach to controls as code and evidence collection. You will automate evidence gathering from major platforms, maintain industry-standard questionnaires, and lead vendor risk reviews while aligning with evolving frameworks like the EU AI Act and DORA.