Security Compliance Framework Engineer

Doist; United States; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work culture

20 days PTO per year, plus 8 floating

Team off-sites in Amsterdam, Italy

Competitive compensation & equity

Comprehensive health & wellnessbenefit

Job summary

Oneleet is a fast-growing security and compliance platform hiring for a role focused on expanding support for new frameworks, refining the control library, and keeping frameworks up to date with changes. You will help customers meet requirements efficiently while reducing unnecessary processes.

The ideal candidate brings hands-on experience with ISO 27001, SOC 2, GDPR, HIPAA, PCI DSS, and comfort editing JSON files with scripting to automate updates and validation checks.

Qualifications

• Frustration with the current compliance space and desire to disrupt it.
• Self-starter mindset; initiative, adapt quickly, thrive in ambiguity, build processes from scratch.
• Strong working knowledge of ISO 27001, SOC 2, GDPR, HIPAA, PCI DSS.
• Comfort editing structured configuration files (JSON) and writing basic scripts to automate rule updates and validation checks.

Responsibilities

• Research new frameworks, and break them down into requirements that map to our current control library
• Evaluate our current control library for inefficiencies or superfluous requirements and keep it clean and focused
• Build automations or documentation for our customers, so they can meet their requirements with the minimum amount of bullshit required
• Make improvements to the compliance product to make compliance easier for our customers.

Skills

JSON

Scripting basics

Compliance frameworks knowledge

Problem solving

Tools

JSON editing

Job description

Oneleet is a fast-growing security and compliance platform hiring for a role focused on expanding support for new frameworks, refining the control library, and keeping frameworks up to date with changes. You will help customers meet requirements efficiently while reducing unnecessary processes.

The ideal candidate brings hands-on experience with ISO 27001, SOC 2, GDPR, HIPAA, PCI DSS, and comfort editing JSON files with scripting to automate updates and validation checks.