Senior Information Security Compliance Engineer

Crestron Electronics; Rockleigh (NJ); On-site; USD 93,500 - 151,000; Full time

Benefits offered by this job

Medical, Dental, Vision Insurance

401(k) with company match

Paid Time Off

On-site Amenities

Job summary

Crestron Electronics is seeking a Senior Information Security Compliance Engineer in Rockleigh, NJ. This role involves implementing and managing security compliance initiatives to align with regulatory requirements, internal policies, and industry standards. The position requires collaboration with various teams and strong expertise in cybersecurity.

The ideal candidate will possess a Bachelor's degree in a relevant field and at least 5 years of experience in cybersecurity compliance. A competitive salary range of $93,500 – $151,000 is offered along with comprehensive benefits.

Qualifications

• 5+ years in cybersecurity with expertise in compliance and audit.
• Knowledge of ISO/IEC 27001 and NIST CSF frameworks.
• Strong communication skills for executive dialogue.

Responsibilities

• Conduct regular security assessments and audits.
• Supervise compliance across IoT products and cloud platforms.
• Coordinate internal and external audits.

Skills

Cybersecurity expertise

Security compliance

Risk management

Auditing skills

Communication skills

Critical thinking

Problem-solving

Education

Bachelor's Degree in Information Security or related field

Master's Degree in Information Security or related field (preferred)

Tools

Cloud Security

Vulnerability Management systems

IAM

SIEM

Job description

Senior Information Security Compliance Engineer

Responsible for implementing and managing the organization’s security compliance initiatives to ensure consistency with regulatory requirements, internal policies, and industry standards. This role works closely with multi‑functional teams including security operations, risk management, IT, legal, and audit to ensure that security controls are effectively implemented, supervised, and continuously improved.

Overview

Senior Information Security Compliance Engineer is responsible for managing security compliance initiatives to keep the organization aligned with regulatory requirements, internal policies, and industry standards. The role collaborates with security operations, risk management, IT, legal, and audit teams to ensure effective and continuous improvement of security controls.

Responsibilities

• Conduct regular security assessments and audits in collaboration with security architect
• Supervise compliance across various IoT products and cloud platforms
• Coordinate internal and external audits and remediation tracking
• Lead and support frameworks including NIST 800‑53, ISO 27001, FedRAMP, GDPR, EU CRA
• Implement and validate security policies, standards, and procedures in alignment with compliance obligations
• Support risk assessments by identifying gaps in security controls and proposing remediation plans
• Maintain and improve the cybersecurity policy framework
• Evaluate and recommend tools for control automation and monitoring
• Collaborate with various platform teams to ensure technical security controls meet compliance requirements
• Participate in vendor and third‑party risk assessments
• Continuously supervise security compliance metrics and key performance indicators for specific product families
• Provide guidance on continuous improvement of the compliance monitoring program
• Experience in writing policy and process design for compliance programs

Qualifications

• Bachelor's Degree in Information Security and Assurance, Computer Science, Cybersecurity or related field required
• Master's Degree in Information Security and Assurance, Computer Science, Cybersecurity or related field preferred
• Minimum 5+ years of extensive all‑round experience in Cybersecurity with expertise in security compliance and audit
• Knowledge of common information security management frameworks such as ISO/IEC 27001 or related and NIST Cybersecurity Framework (NIST CSF)
• Familiarity with identity and access management (IAM), endpoint protection, SIEM, and vulnerability management systems
• Proven experience in information security, particularly within auditing, compliance and risk management
• Strong communication and interpersonal skills, including executive communication to senior leadership
• Strong critical thinking and problem‑solving skills to resolve problems effectively and creatively while maintaining a high level of flexibility, professionalism, and integrity
• Experience with cloud security, encryption technologies, and network security protocols preferred
• Experience with Cloud and infrastructure security controls, auditing/assurance, risk assessment and remediation planning, analytical thinking, detail‑oriented focus on accuracy, and strong policy and procedure development and implementation
• Preferred Certifications: CISSP, CISM, CISA, CRISC, Cloud (AWS or Azure)

Per applicable state requirements, the annual pay range for this position ($93,500 – $151,000) which consists of base salary (subject to performance), reflects the hiring range for candidates. An individual’s offer may vary from this range as it may be impacted by additional factors including but not limited to the candidate’s hiring location, qualifications, experience, and market factors.

Crestron Electronics offers a competitive total compensation package including Medical, Dental, Vision, Life Insurance, Short Term Disability, 401(k) with company match, Paid Time Off, Holidays, On‑site Amenities at NJ Headquarters & TX Facilities, Crestron Market Cafes, and Fitness Centers.

Crestron Electronics is committed to diversity, equity, and inclusion. Our success hinges on building a workforce of unique individuals whose passion inspires us to create and revolutionize industry‑leading products and services. There will always be more to accomplish, and at Crestron, we believe the best way forward is together.

EOE/M/F/D/V

• No solicitation. Any agency submittal to any employee of Crestron Electronics, Inc by any method of communication will be deemed the sole property of Crestron Electronics Inc.