Staff Security Engineer

Requirements:

• 5 years of experience in information security, GRC, or compliance-focused roles
• Deep familiarity with ISO 27001 and SOC 2 Trust Services Criteria
• Comfort operating across the full breadth of an Information Security Management System (ISMS)
• Demonstrated experience writing and revising security policies
• Excellent cross-functional collaboration skills
• Ability to ramp up quickly and operate with a high degree of independence

What You'll Be Doing:

• Maintain and mature the ISMS, including risk treatment plans and MRM process
• Support ISO 27001 and SOC 2 Type 2 audit execution
• Contribute to SOC 2 System Description and audit-specific narrative documentation
• Lead the policy program
• Track gaps and remediation efforts
• Support compliance scaling as additional products pursue certification
• Support internal audit function and partner with resources as needed
• Partner with various teams to gather evidence and drive control ownership
• Advise GRC manager and Security leadership on audit risk and compliance program strategy

Perks and Benefits:

• Performance-based bonus plans
• Medical, dental, and vision coverage
• Generous retirement contributions
• Wellness days and country-specific holidays
• Home office stipend and professional development budget
• Paid parental leave and employee referral bonus program