Cybersecurity Compliance Engineer

Job Summary

Supporting compliance initiatives in a remote capacity, the full-time Cybersecurity Compliance Engineer will manage day-to-day compliance activities across various frameworks, lead audits, and perform technical reviews of third-party vendors to ensure adherence to regulatory and security requirements.

Key Responsibilities

• Ensure compliance with frameworks such as PCI DSS, SOC 2, NIST, GDPR, and ISO through daily activities and audits
• Lead internal and external audits, coordinating evidence collection, control validation, and remediation efforts
• Evaluate third-party vendors' security controls and compliance posture, providing recommendations for risk management

Required Qualifications

• Experience in information security, audit, compliance, GRC, or a related technical field
• Strong knowledge of PCI-DSS assessments and experience with control testing and remediation
• Experience performing security and compliance reviews of systems and third-party service providers
• Familiarity with GRC or compliance automation platforms such as Drata, Vanta, or similar tools
• Strong documentation and organizational skills for managing compliance initiatives and audit requests