Senior Compliance Engineer

VACO; Miami (FL); Remote; USD 125,000 - 150,000; Full time

Job summary

An innovative SaaS organization seeks a Sr. Compliance Engineer to enhance security compliance and manage documentation. This role involves collaborating with cross-functional teams to assess risks, maintain compliance with various frameworks, and improve risk management programs. The position offers a chance to work remotely and contribute significantly to the organization's compliance initiatives. Ideal candidates will have a strong background in GRC, internal audit, and security, with excellent communication skills. Join a forward-thinking company and make a meaningful impact in the compliance landscape!

Qualifications

• 5+ years in GRC, internal audit, security, or privacy.
• Strong knowledge of compliance frameworks and scripting languages.

Responsibilities

• Drive security compliance efforts and maintain documentation.
• Work with teams to identify risks and gaps in compliance controls.

Skills

GRC

Internal Audit

Security Compliance

Privacy Management

Scripting Languages (Ruby, Python, Unix shell, bash)

Project Management

Written and Verbal Communication

Education

Bachelor's Degree in relevant field

Tools

Compliance Frameworks (PCI, SOC2, ISO 27001, HIPAA, GDPR)

Job description

Sr. Compliance Engineer-Enterprise SaaS, Trust & Compliance Team

Summary:
Vaco Staffing is conducting a search on behalf of a SaaS software organization in need of a Sr. Compliance Engineer with a background in policy-writing, procedural documentation, and audit program management skills.

Project Details:

1. This is a 3–4-month contract position very likely to extend and does have a chance to convert but not a guarantee. The pay rate is 65/hr. w2 with some flexibility (within reason for the right candidate).
2. The position is 100% remote.
3. Must be willing to work on Vaco w2 directly, no c2c, third party inquiries or 1099 candidates.
4. Unable to sponsor now, unable to sponsor in future.
5. Background Checks will be included in the process.

The role of a Sr. Compliance Engineer is to work with our Trust and Compliance team to:

1. Drive security compliance efforts from the beginning to the end by maintaining a positive relationship with both internal and external stakeholders.
2. Maintain compliance documentation, including audit evidence, controls, and vendor security reviews.
3. Design, implement, maintain, and improve programs to address key company risks and prepare internal teams for independent assessments against a wide variety of regulatory and compliance frameworks (PCI, SOC, ISO 27XXX, HIPAA, GDPR, etc).
4. Monitor the performance of the compliance program through the development of and maintenance of automated systems.
5. Work with cross functional teams to identify risks and gaps in our compliance controls and facilitate remediation across our products and infrastructure.
6. Assist with completing security questionnaires from customers and answering customer questions with respect to compliance; work with the internals team to create customer collateral to educate internal staff and aid in the sales process!
7. Assist with requesting/reviewing security questionnaires/contracts from vendors and identify security risks and gaps in the compliance controls to aid in the procurement process!
8. Develop automations of risk management, control execution and monitoring.

WHAT YOU’LL NEED TO BE SUCCESSFUL

1. 5+ years of experience with a demonstrated track record of success in GRC, internal audit, security, and/or privacy space.
2. Knowledge of various compliance frameworks (PCI, SOC2, ISO 27001, ISO 27018, HIPAA, GDPR, etc.).
3. Strong experience with any scripting languages like Ruby, Python, Unix shell, bash, etc.
4. Functional knowledge of multiple security domains and information security industry standards and best practices including public and private cloud.
5. Experience leading 3rd party risk management programs, including responding to customer security questionnaires, interacting directly with customer sales and security teams, and reviewing vendor security.
6. Solid experience managing compliance initiatives for cloud platforms and interacting with external auditors.
7. Strong project management skills.
8. Strong written and verbal communication skills.

NICE TO HAVEs

1. A mix of experiences at a Big Four (or similar) audit or consulting firm and at an in-house governance, risk, and compliance function at a SaaS company.
2. Industry recognized certification in security ISO 27001 LA / LI or desire to pursue CISSP, CISA, CISM, CCSK, etc. in 6 months.
3. Experience working in an international / global organization.