Security Compliance Specialist II

Akamai; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

Akamai is seeking a Compliance Specialist II to strengthen our security compliance posture. You will lead hands-on control testing, identify risks, and manage audit activities across SOC 2, ISO 27001, and PCI DSS, collaborating with Engineering, DevOps, and IT owners to gather evidence and drive remediation.

Ideal candidates have 4+ years of experience with security control testing, strong analytical and communication skills, and familiarity with cloud infrastructure and containerized

Qualifications

• 4+ years of hands-on experience evaluating or testing security controls against industry standards, with a strong emphasis on SOC 2, ISO 27001, or PCI DSS.
• Working knowledge of core technical security controls (e.g., Identity & Access Management, Change Management, Vulnerability Management, and Logging/Monitoring).
• Strong analytical, problem-solving, and written/verbal communication skills.
• Relevant security or audit certifications (e.g., CISA, CRISC, Security+, CISM, or ISO Lead Auditor) preferred but not required.
• Experience working with cloud infrastructure, containerized environments, or distributed systems preferred but not required.

Responsibilities

• Execute design and operating effectiveness testing for technical, physical, and operational security controls across primary frameworks such as SOC 2, ISO 27001, and PCI DSS.
• Coordinate sampling populations, lead technical walkthroughs with Engineering, DevOps, and IT system owners, and review technical evidence.
• Identify control gaps, document exception trends in our GRC platform, and partner with system owners to draft actionable remediation plans and track them to closure.
• Serve as a controls liaison during external audits, managing evidence pipelines, helping explain technical control implementations to auditors, and minimizing business disruption.
• Partner with engineering teams to transition manual control testing toward continuous control monitoring using GRC tooling and automation.

Skills

SOC 2 testing

ISO 27001 testing

PCI DSS testing

Security controls evaluation

Analytical skills

Written/verbal communication

Education

Bachelor's degree or equivalent experience

4+ years hands-on security controls testing

Tools

GRC tooling

Cloud infrastructure

Containerized environments

Job description

Role & responsibilities

As a Compliance Specialist II within Security Compliance, you will be a key contributor to Akamais security compliance posture by leading hands-on control testing, risk identification, and audit management.

Specific responsibilities include:

• Controls Testing & Assessment: Execute design and operating effectiveness testing for technical, physical, and operational security controls across primary frameworks such as SOC 2, ISO 27001, and PCI DSS.
• Evidence Collection & Walkthroughs: Coordinate sampling populations, lead technical walkthroughs with Engineering, DevOps, and IT system owners, and review technical evidence.
• Deficiency Analysis & Remediation: Identify control gaps, document exception trends in our GRC platform, and partner with system owners to draft actionable remediation plans and track them to closure.
• Third-Party Audit Support: Serve as a controls liaison during external audits, managing evidence pipelines, helping explain technical control implementations to auditors, and minimizing business disruption.
• Process Optimization: Partner with engineering teams to transition manual control testing toward continuous control monitoring using GRC tooling and automation.

Preferred candidate profile

Applicants must meet one of the following education and experience requirements:

• 4 years of relevant experience and a Bachelors degree or
• Equivalent and, or relevant professional experience

Qualifications

• 4+ years of hands-on experience evaluating or testing security controls against industry standards, with a strong emphasis on SOC 2, ISO 27001, or PCI DSS.
• Working knowledge of core technical security controls (e.g., Identity & Access Management, Change Management, Vulnerability Management, and Logging/Monitoring).
• Strong analytical, problem-solving, and written/verbal communication skills.
• Relevant security or audit certifications (e.g., CISA, CRISC, Security+, CISM, or ISO Lead Auditor) preferred but not required.
• Experience working with cloud infrastructure, containerized environments, or distributed systems preferred but not required.