Remote Security Ops Engineer — High-Impact Compliance

AssemblyAI, Inc.; Northern (KY); Hybrid; USD 180,000 - 220,000; Full time

Benefits offered by this job

Remote work

Equity grants

Employer-paid benefits

401k match up to 4%

Job summary

AssemblyAI is hiring a Security Operations Engineer to join our IT & Security team and own the operational backbone of our security program. You’ll run compliance cycles (SOC 2, ISO 27001, PCI 4.0), manage evidence, and build controls with auditors while growing the technical side through automation.

You’ll collaborate with engineers, sales, and legal on customer security needs, and help enforce security across products and infrastructure in a fast-growing environment.

Qualifications

• 3+ years of experience in security operations, GRC, IT security, or related role.
• 2+ years of experience with compliance audit cycles—gathered evidence and documented controls.
• One or more security certifications—CISA, Security+, AWS Security Specialty, or equivalent.
• Experience executing recurring security operations work: security reviews, vulnerability tracking, alert triage, or control monitoring.

Responsibilities

• Drive SOC 2, ISO 27001, PCI 4.0, and other compliance audit cycles: gather evidence, document, design and build controls, coordinate with auditors, and remediate with internal teams.
• Own the compliance automation platform (Vanta): monitor control status, chase failed checks, maintain integrations, update risk register.
• Run vendor and third-party risk reviews, security assessments of new tools, periodic re-reviews, and track inventories.
• Partner with sales and legal responding to customer and vendor security questionnaires, RFP sections, and trust-and-safety inquiries.
• Drive vulnerability triage and prioritization across teams, track remediation against SLAs and report metrics.
• Monitor and respond to alerts from endpoint, cloud, identity, and application security tools; investigate, escalate, close the loop.
• Support incident response for security events: evidence collection, timeline construction, documentation, and post-incident actions.
• Maintain and improve security runbooks and playbooks.
• Build automation to reduce manual burden via scripts, integrations, and tooling.

Skills

Security operations

GRC

Audit processes

Python

AI tooling

Written communication

AWS familiarity

Security certifications

Education

CISA certification

Security+ certification

AWS Security Specialty

Tools

Vanta

Job description

AssemblyAI is hiring a Security Operations Engineer to join our IT & Security team and own the operational backbone of our security program. You’ll run compliance cycles (SOC 2, ISO 27001, PCI 4.0), manage evidence, and build controls with auditors while growing the technical side through automation.

You’ll collaborate with engineers, sales, and legal on customer security needs, and help enforce security across products and infrastructure in a fast-growing environment.