Senior Compliance Engineer

Job Summary

Owning TRM's compliance and GRC initiatives, the full-time Senior Compliance Engineer will develop scalable processes for monitoring controls, manage security compliance certifications, and operationalize the GRC program while working remotely.

Key responsibilities

• Develop and implement processes for normalized controls and audit evidence collection
• Manage the security compliance and certification lifecycle, including SOC 2 Type II and ISO standards
• Conduct enterprise risk assessments and maintain the risk registry while developing a vendor risk management program

Required qualifications

• Experience with Python or other programming and scripting languages
• Strong understanding of Public Sector compliance security standards, including NIST 800-53 and SOC 2
• Experience leading a cloud-first SaaS company through audit processes
• Knowledge of Privacy by Design principles and GDPR compliance
• Security certifications such as CISSP or CISM are a plus