Senior Security Assurance Engineer

MathWorks; Natick (MA); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

MathWorks seeks a Senior Security Assurance Engineer to lead and mature our SOC 2 program, coordinating external audits and building a robust audit readiness framework. You will collaborate with Engineering, IT, Security, Privacy and Legal to strengthen controls and governance across the organization.

Join a team that champions security, governance, and continuous improvement in a hybrid work environment, with Natick, MA as a core location.

Qualifications

• Bachelor's degree or higher in a related field with security/compliance experience.
• Hands-on experience with SOC 2 audits, ITGCs, and control testing.
• Strong stakeholder management and cross-functional collaboration skills.
• Experience with GRC platforms and external certification engagements.

Responsibilities

• Own the external SOC 2 certification effort, including scope management, control readiness, auditor coordination, evidence collection, and certification outcomes.
• Plan and execute internal audits across ITGCs, application controls, IAM controls, and security processes.
• Partner with Engineering, IT, Security, Privacy, Legal, and business teams to embed compliance into day-to-day operations.
• Translate SOC 2 requirements into practical guidance for technical and non-technical stakeholders and drive continuous improvement.

Skills

SOC 2

Audit coordination

GRC

ITGCs

Stakeholder management

Policy and controls

Project management

Security compliance

Communication

Education

Bachelor's degree

Master's degree (preferred)

PhD (alternative)

Tools

GRC platforms

Job description

Job Summary

MathWorks has a hybrid work model that enables staff members to split their time between office and home. The hybrid model provides the advantage of having both in-person time with colleagues and flexible at-home life optimizations. Learn More: https://www.mathworks.com/company/jobs/resources/applying-and-interviewing.html#onboarding.

Are you passionate about building trust through robust security compliance programs? We are seeking a highly collaborative and results-driven Senior Security Assurance Engineerto drive and mature our SOC 2 assurance program, manage external audit engagements, drive audit excellence, and partner across the organization to strengthen our control environment.

MathWorks nurtures growth, appreciates inclusivity, encourages initiative, values teamwork, shares success, and rewards excellence.

Responsibilities

Drive External SOC 2 Certification & Audit Readiness

• Own the external SOC 2 certification effort, including scope management, control readiness, auditor coordination, evidence collection, and successful certification outcomes.
• Develop and maintain a year-round audit readiness program to ensure continuous compliance with SOC 2 Trust Services Criteria.
• Build and manage audit evidence repositories, readiness assessments, remediation plans, and certification deliverables.

Plan & Execute Internal Audits

• Lead internal audits and control testing activities across IT General Controls (ITGCs), application controls, IAM controls, and security processes.
• Evaluate control design and operating effectiveness using walkthroughs, sampling, re-performance, and evidence inspection techniques.
• Document clear, defensible audit conclusions and communicate findings to stakeholders and leadership.
• Validate corrective actions and remediation efforts to ensure sustainable control improvements.

Drive Cross-Functional Collaboration

• Partner closely with Engineering, IT, Security, Privacy, Legal, and business teams to embed compliance into day-to-day operations.
• Facilitate control walkthroughs, risk discussions, and audit preparation activities with process owners and control operators.
• Translate SOC 2 requirements into practical, actionable guidance for technical and non-technical stakeholders.
• Foster a culture of accountability, audit readiness, and continuous improvement across the organization.

Strengthen Controls & Governance

• Assess control gaps, identify risks, and drive remediation initiatives to enhance the overall control environment.
• Review and improve security policies, standards, procedures, and controls to ensure clarity, consistency, and auditability.
• Monitor control effectiveness through ongoing testing, spot checks, and compliance reviews.
• Contribute to risk assessments, control mapping, and governance initiatives that support organizational compliance objectives.
• Identify meaningful ways to improve control and trust service criteria coverage, and influence thoughtful scope additions to external SOC 2 certification.

Qualifications

• A bachelor's degree and 6 years of professional work experience (or a master's degree and 3 years of professional work experience, or a PhD degree, or equivalent experience) is required.

Additional Qualifications

• Strong domain expertise and knowledge of security compliance frameworks such as SOC 2, NIST, ISO 27001, ISO 42001, etc.
• Hands-on experience in cybersecurity compliance, security assurance, GRC, internal audit, or information security.
• Deep expertise leading SOC 2 internal audits, control testing, and external certification engagements.
• Strong knowledge of ITGCs, application controls, IAM controls, evidence evaluation, and audit methodologies.
• Proven ability to assess control design and operating effectiveness and provide practical remediation guidance.
• Experience preparing organizations for external audits and managing auditor interactions from planning through certification.
• Exceptional stakeholder management and collaboration skills, with the ability to influence teams at all levels.
• Strong project management skills with the ability to lead multiple audit and compliance initiatives simultaneously.
• Experience with GRC platforms or similar tools.
• Excellent written and verbal communication skills, including executive-ready reporting and presentations.