Senior SaaS Security & Compliance Strategist

Jobtailor; Burlington (MA); On-site; USD 120,000 - 165,000; Full time

Job summary

Jobtailor is actively seeking a Senior Security & Compliance Engineer to lead and scale security programs for a fast-growing SaaS environment in Massachusetts. You will drive ISO 27001, SOC 2, NIST, GDPR alignment and manage security tooling across AWS, Azure, or GCP while collaborating with product, engineering, and legal teams.

Ideal candidates bring 4+ years in information security/compliance, strong audit readiness, and a track record of implementing compliance-as-code.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience
• 4+ years of experience in information security, compliance, or a related technical role
• Strong knowledge of ISO 27001, SOC 2, NIST, PCI-DSS, HIPAA, and GDPR
• Hands-on experience with AWS, Azure, or GCP and their security services
• Familiarity with auditing, logging, monitoring, and vulnerability management tools, including SAST, DAST, and SCA
• Experience with compliance automation tools such as Terraform, Cloud Custodian, or other compliance-as-code frameworks
• Background in DevSecOps or secure software development practices is a plus
• Security certifications such as CISSP, CISM, CISA, or CCSK preferred
• Excellent documentation, communication, and collaboration skills
• Repetitive motion of wrists, hands and fingers for using a computer
• Sitting for extended periods, remaining in a stationary position

Skills

Information Security

Risk Management

Security Policies

Control Testing

Vulnerability Management

DevSecOps

Compliance-as-Code

Access Controls

Logging

Encryption

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Terraform

Cloud Custodian

SAST

DAST

SCA

AWS

Azure

GCP

Job description

Jobtailor is actively seeking a Senior Security & Compliance Engineer to lead and scale security programs for a fast-growing SaaS environment in Massachusetts. You will drive ISO 27001, SOC 2, NIST, GDPR alignment and manage security tooling across AWS, Azure, or GCP while collaborating with product, engineering, and legal teams.

Ideal candidates bring 4+ years in information security/compliance, strong audit readiness, and a track record of implementing compliance-as-code.