security engineer for corporate IT and compliance

Prefect; United States; À distance; USD 120 000 - 180 000; Plein temps

Avantages offerts par ce poste

Equity stock options

401(K) with company match

Unlimited PTO

Medical, Dental and Vision insurance

Remote work stipend $800/month

Remote-first culture

Résumé du poste

Prefect ищет специалиста по IT и комплаенсу, который возьмёт на себя повседневную работу по SOC 2, сбору доказательств и обзорам доступа, сотрудничая с аудиторами и владельцами контроля.

Ваша задача — автоматизировать повторяющиеся задачи через скрипты и API, управлять Google Workspace и оборудованием сотрудников, а также помогать в выборе платформы GRC и оптимизации процессов.

Qualifications

• Hands-on IT и комплаенс опыт, способность владеть обеими сферами.
• Опыт работы с SOC 2 и взаимодействие с внешними аудиторами.
• Понимание контроля, доказательств их функционирования и адаптация контролей.
• Умение автоматизировать повторяющиеся задачи через скрипты, API и AI.

Responsabilités

• Выполнение повседневной деятельности по IT и комплаенсу, включая SOC 2, сбор доказательств, обзоры доступа, подтверждения политик и обучение.
• Работа с аудиторами и владельцами контроля, сопровождение до устранения замечаний.
• Помощь в выборе платформы GRC, консолидация программ комплаенса и проектирование мероприятий, снижающих ручной труд.
• Администрирование Google Workspace и SaaS‑приложений, управление onboarding/offboarding через People Operations, настройка Mac через Rippling.

Connaissances

Hands-on IT experience

SOC 2 controls

Evidence collection

Auditing with external auditors

Automation via scripts/APIs

Outils

Google Workspace

Rippling

MDM

GRC platforms (Vanta/Drata/Thoropass)

Description du poste

Описание

Prefect builds automation products for data pipelines and AI agents. Its ecosystem includes Dagster, a data platform; Prefect, an agent platform; and FastMCP, an open-source developer framework for the MCP ecosystem.

Задачи

Run day-to-day compliance activities, including SOC 2 controls, evidence collection, access reviews, policy acknowledgments, and training Work with auditors and control owners, and follow findings through to resolution Help select a GRC platform, consolidate compliance programs, adapt control descriptions, and design activities that reduce manual work Administer Google Workspace and SaaS apps, manage onboarding and offboarding with People Operations, and manage the Mac fleet in Rippling Help employees resolve laptop and access issues, and improve the IT setup Improve access request, approval, provisioning, and removal processes with the identity partner; own and document daily processes Manage macOS and application updates, investigate endpoint alerts, and track vulnerabilities through remediation Verify fixes and participate in phishing and other corporate incident response Automate repetitive IT and compliance work using scripts, APIs, workflow tools, or AI, and make common requests self-service

Требования

Hands‑on IT and compliance experience, practical technical judgment, and ability to take ownership across both areas Experience owning recurring SOC 2 activities and working directly with external auditors, or auditing experience Understanding of controls, evidence of their operation, and adapting controls across systems and teams Experience administering and securing corporate IT systems, including account management, onboarding and offboarding, and Macs managed through an MDM Comfortable with patching, endpoint alerts, remediation tracking, phishing or suspicious account activity, and employee troubleshooting Comfortable automating recurring tasks with scripts, APIs, workflow tools, or AI, and able to explain something built Ability to drive cross‑team work, establish owners and deadlines, resolve blockers, follow through, document tasks, and know when to elevate Not suited to candidates seeking to leave hands‑on IT support behind or requiring a settled, fully documented environment from day one Будет плюсом: Google Workspace, Rippling, or a GRC platform such as Vanta, Drata, or Thoropass; SSO, SCIM provisioning, or other access automation; implementing or migrating an IT or compliance system, or improving a process involving several teams

Условия

• Equity and benefits are not included in the base salary ranges
• Equity Stock Options
• 401(K) with 5% company match, vesting immediately
• Unlimited PTO
• Medical, Dental and Vision insurance
• Generous Parental Leave
• Life Insurance and Disability benefits
• $800/Month remote work stipend
• Remote‑first team with a flexible‑first culture