Security Compliance Specialist II - Remote/Hybrid (GRC)

Akamai Technologies, Inc.; Cambridge (MA); Hybrid; USD 89,000 - 160,000; Full time

Benefits offered by this job

Healthcare benefits

401K savings plan

Employee Stock Purchase Plan (ESPP)

Job summary

Akamai Technologies, Inc. is seeking a Security Compliance Specialist II to partner with engineering and security teams to implement and maintain compliance with industry standards.

The role focuses on evaluating controls, collecting evidence, and driving remediation within a robust GRC framework. The position requires 2+ years of relevant experience, familiarity with cloud concepts and security controls, and hands-on use of GRC platforms.

Qualifications

• 2+ years of experience or equivalent professional experience in security/compliance.
• Understanding of cloud computing concepts and cloud platforms.
• Familiar with security concepts: IAM, networking, encryption, logging, vulnerability management.
• Experience with frameworks such as SOC 2, ISO 27001, PCI DSS, NIST, HIPAA.
• Familiarity with cloud platforms (AWS, Azure, GCP, Akamai Cloud/Linode).
• Experience using GRC platforms (ServiceNow IRM, Archer, AuditBoard, etc.).

Responsibilities

• Partner with engineering teams to assess the implementation of security controls.
• Evaluate compliance with SOC 2, ISO 27001, PCI DSS, HIPAA, and other frameworks.
• Collect, validate, and organize audit evidence for internal and external reviews.
• Perform control testing to verify processes operate effectively.
• Track remediation activities and assist owners in resolving findings.
• Review architecture diagrams, SOPs, and change records.

Skills

Cloud concepts

IAM

Networking

Encryption

Logging

Vulnerability management

SOC 2

ISO 27001

PCI DSS

NIST

HIPAA

Cloud platforms (AWS, Azure, GCP)

Education

Bachelor's degree or equivalent

Tools

ServiceNow IRM

Archer

AuditBoard

Job description

Akamai Technologies, Inc. is seeking a Security Compliance Specialist II to partner with engineering and security teams to implement and maintain compliance with industry standards.

The role focuses on evaluating controls, collecting evidence, and driving remediation within a robust GRC framework. The position requires 2+ years of relevant experience, familiarity with cloud concepts and security controls, and hands-on use of GRC platforms.