Compliance Engineer

Job Summary

Driving the implementation of compliance requirements, the full-time remote Compliance Engineer will automate evidence collection for audits, establish compliance as code, and manage user access to ensure security policy adherence.

Key responsibilities

• Serve as the technical contact for SOX, SOC2 Type II, and ISO-27001 audits, automating evidence collection into Continuous Compliance workflows
• Collaborate with DevOps Engineers to implement Compliance as Code and conduct internal reviews of infrastructure configurations
• Manage the technical lifecycle of user access, enforce Segregation of Duties, and review deprovisioning workflows for compliance

Required qualifications

• A minimum of 5 years in a technical compliance, security, or DevOps-adjacent role, preferably within a SaaS environment
• Strong understanding of compliance frameworks such as SOX 404, ISO-27001, SOC2, and IT general controls
• 2-4 years of hands-on experience in DevOps or Platform Engineering, particularly with AWS and cloud-native applications
• Experience leveraging compliance automation platforms to build and maintain automated evidence-gathering tools
• An engineering background with a collaborative mindset, including mentoring and partnering with cross-functional teams