Security Compliance Automation Lead

ServiceNow; Mountain View (CA); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Moveworks is seeking an IC Tech Lead in security compliance to automate evidence collection and continuous monitoring across cloud environments. You’ll own the technical strategy for certifications like ISO 27001 and SOC 2 Type 2, while partnering with auditors and stakeholders to ensure controls are always current.

The role emphasizes automation, scalable architectures, and AI-driven mapping of controls to evidence.

Qualifications

• 8+ years of experience in information security roles, focusing on security compliance and risk management.
• Bachelor’s degree in Computer Science, IT, Cybersecurity, or related field; advanced certifications preferred.
• Experience developing and implementing security policies and compliance frameworks (ISO 27001, ISO 42001, NIST, GDPR, SOC 2 Type 2).
• Knowledge of security principles, controls, and technologies; cloud security practices and provider standards.

Responsibilities

• Build automated evidence collection pipelines integrating with cloud infra, identity providers, source control, ticketing systems, and security tooling.
• Design and implement continuous control monitoring for real-time compliance measurement.
• Lead compliance initiatives for certifications and regulatory frameworks; design scalable solutions with minimal overhead.
• Apply AI/LLMs/agents to map controls to evidence, validate it, and flag drift.
• Navigate auditor relationships and drive remediation with stakeholders.

Skills

Security compliance

Cloud security

AWS

Automation

Regulatory frameworks

Communication

Risk management

Audits coordination

Education

Bachelor's degree in CS/IT/Cybersecurity

CISM/CISSP/CISA

Tools

GRC tools

AWS services

Job description

Moveworks is seeking an IC Tech Lead in security compliance to automate evidence collection and continuous monitoring across cloud environments. You’ll own the technical strategy for certifications like ISO 27001 and SOC 2 Type 2, while partnering with auditors and stakeholders to ensure controls are always current.

The role emphasizes automation, scalable architectures, and AI-driven mapping of controls to evidence.