Security Compliance Specialist

Jobgether; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Remote working arrangement in India

Flexible working options

Benefits supporting employee health, 1

Job summary

Jobgether seeks a Security & Compliance professional in the United States to conduct security control testing and verify effectiveness across technical, physical, and organizational controls. You will coordinate walkthroughs with Engineering, IT, and system owners, and review evidence to identify gaps and remediation needs.

With 2–6 years of relevant experience, you will assess controls against SOC 2, ISO 27001, and PCI DSS, and support internal and third-party audits.

Qualifications

• 2–6 years of relevant professional experience, supported by equivalent qualifications and applicable experience.
• Experience evaluating security controls against SOC 2, ISO 27001, or PCI DSS.
• Strong understanding of technical security controls (IAM, Change Management, Vulnerability Management, Logging & Monitoring).
• Ability to review technical evidence, identify control weaknesses, assess risks, and support remediation activities.
• Strong analytical and problem-solving skills with excellent attention to detail.
• Excellent written and verbal communication, able to explain technical controls and compliance requirements to different stakeholders.
• Ability to collaborate with engineering, IT, and business teams in a cross-functional environment.
• Nice to have: Security or audit certifications such as CISA, CRISC, Security+, CISM, or ISO Lead Auditor.
• Nice to have: Experience with cloud infrastructure, containerized environments, or distributed systems.

Responsibilities

• Conduct security control testing and evaluations to assess design and operational effectiveness across technical, physical, and organizational controls.
• Assess controls against industry frameworks and standards, including SOC 2, ISO 27001, and PCI DSS.
• Coordinate sampling populations and lead technical walkthroughs with Engineering, DevOps, IT, and system owners.
• Review technical documentation and evidence to verify control implementation and effectiveness.
• Identify control gaps, assess associated risks, and document exceptions and recurring trends in the GRC platform.
• Collaborate with system owners and stakeholders to develop practical remediation plans.
• Support internal and third-party audits by coordinating evidence collection and explaining technical controls to auditors.
• Help manage audit activities while minimizing disruption to engineering and business operations.
• Contribute to improving compliance processes through automation and effective use of GRC tools.
• Work with Security Compliance colleagues and cross-functional teams to strengthen ongoing compliance operations and security practices.

Skills

IAM

Change Management

Vulnerability Management

Logging & Monitoring

Analytical Skills

Communication Skills

Cross-functional Collaboration

Job description

Accountabilities

• - Conduct security control testing and evaluations to assess design and operational effectiveness across technical, physical, and organizational controls.
• - Assess controls against industry frameworks and standards, including SOC 2, ISO 27001, and PCI DSS.
• - Coordinate sampling populations and lead technical walkthroughs with Engineering, DevOps, IT, and system owners.
• - Review technical documentation and evidence to verify control implementation and effectiveness.
• - Identify control gaps, assess associated risks, and document exceptions and recurring trends in the Governance, Risk, and Compliance (GRC) platform.
• - Collaborate with system owners and relevant stakeholders to develop practical, actionable remediation plans.
• - Support internal and third-party audits by coordinating evidence collection and explaining technical controls to auditors.
• - Help manage audit activities while minimizing disruption to engineering and business operations.
• - Contribute to improving compliance processes through automation and effective use of GRC tools.
• - Work with Security Compliance colleagues and cross-functional teams to strengthen ongoing compliance operations and security practices.

Requirements:

• - 2–6 years of relevant professional experience, supported by equivalent qualifications and applicable experience.
• - Practical experience evaluating security controls against recognized industry standards, particularly SOC 2, ISO 27001, or PCI DSS.
• - Strong understanding of technical security controls, including Identity and Access Management (IAM), Change Management, Vulnerability Management, and Logging and Monitoring.
• - Ability to review technical evidence, identify control weaknesses, assess risks, and support remediation activities.
• - Strong analytical and problem-solving skills, with excellent attention to detail.
• - Effective written and verbal communication skills, including the ability to explain technical controls and compliance requirements to different stakeholders.
• - Ability to collaborate with engineering, infrastructure, IT, and business teams in a cross-functional environment.
• - Nice to have: Relevant security or audit certifications such as CISA, CRISC, Security+, CISM, or ISO Lead Auditor.
• - Nice to have: Experience with cloud infrastructure, containerized environments, or distributed systems.

Benefits:

• - Remote working arrangement in India.
• - Flexible working approach, with the option to work from home, from an office, or through a combination of both, depending on role needs.
• - Benefits supporting employee health, well-being, financial security, and life beyond work.