Compliance Engineer

Responsibilities

• Build and maintain technical controls across SOC 2, ISO 27001, HIPAA, and other security and compliance frameworks.
• Automate compliance workflows, evidence collection, access reviews, security checks, and repetitive processes.
• Implement and monitor controls for access management, infrastructure, data protection, logging, and vulnerability management.
• Own technical evidence collection and support audits and auditor requests.
• Respond to customer security questionnaires, compliance requirements, and technical due diligence.
• Identify compliance and security gaps and build scalable systems to address them.

Requirements

• Technical background in software engineering, security, infrastructure, IT, or a related field.
• Strong scripting or programming skills in Python, JavaScript/TypeScript, Bash, or a similar language.
• Understanding of IAM, encryption, networking, logging, vulnerability management, and cloud security.
• Ability to learn security and compliance frameworks and translate requirements into technical solutions.
• Analytical problem-solving skills and comfort working through ambiguous problems.
• Ability to collaborate across Engineering, Security, Legal, and customer-facing teams.
• Clear communication skills for explaining technical and compliance concepts to technical and non-technical audiences.
• Experience with SOC 2, ISO 27001, HIPAA, or other compliance frameworks is preferred.
• Experience with AWS, GCP, Vanta, Drata, Wiz, Okta, or similar tools is preferred.

Benefits

• Remote work arrangement.
• Available as full-time employment or part-time 1099 contract work.
• Must be available for some overlapping hours with the Pacific Time team and customers.