Senior Security & Compliance Engineer (SOC 2, Cloud)

Grayson Search Partners; Nashville (TN); On-site; USD 120,000 - 150,000; Full time

Job summary

Grayson Search Partners is seeking a Senior Information Security & Compliance Engineer in Nashville to lead security controls, compliance efforts, and risk management across our cloud-based environment.

You will collaborate with MSPs and engineering teams to strengthen security posture, drive audit readiness, and ensure regulatory obligations are met. This role blends hands-on security work with customer-facing compliance activities in a SaaS setting.

Qualifications

• Minimum of seven years of professional experience in cybersecurity or information security.
• Hands-on background in security engineering or security operations.
• Experience supporting SOC 2, ISO 27001, or comparable frameworks.
• Strong vulnerability identification, prioritization, and remediation.
• Experience with security monitoring platforms, endpoint protection, and threat management tools.
• Knowledge of identity and access management principles and best practices.
• Experience contributing to incident response and cybersecurity investigations.
• Excellent communication, documentation, and stakeholder engagement skills.

Responsibilities

• Oversee day-to-day cybersecurity operations in collaboration with managed security providers and technology partners.
• Direct vulnerability assessment activities and coordinate remediation efforts across systems and applications.
• Participate in the detection, analysis, containment, and resolution of security incidents.
• Manage and maintain security technologies such as SIEM platforms, endpoint protection solutions, email security systems, vulnerability management tools, and identity security controls.
• Contribute to the creation, review, and ongoing enhancement of security policies, practices, and governance documentation.
• Facilitate internal and external audit engagements, including preparation and collection of supporting evidence.
• Perform security risk evaluations and technical control assessments.
• Assist with customer due diligence reviews and responses to security-related inquiries.
• Ensure adherence to established security requirements, regulatory obligations, and compliance standards.
• Work closely with infrastructure and software development teams to strengthen the organization's overall security posture.
• Review proposed system and process changes for security implications and compliance alignment.
• Monitor corrective action plans and drive continuous improvement initiatives across the security program.

Skills

Cybersecurity

Security operations

Vulnerability management

Incident response

Audit readiness

Regulatory compliance

Communication

Tools

SIEM

Endpoint protection

Threat management tools

Identity security controls

Job description

Grayson Search Partners is seeking a Senior Information Security & Compliance Engineer in Nashville to lead security controls, compliance efforts, and risk management across our cloud-based environment.

You will collaborate with MSPs and engineering teams to strengthen security posture, drive audit readiness, and ensure regulatory obligations are met. This role blends hands-on security work with customer-facing compliance activities in a SaaS setting.