Senior Security Engineer

Job Summary

Leading the strategic maturation of compliance frameworks, the full-time Senior Security Engineer will architect and implement an Integrated Management System for multiple ISO standards while collaborating with engineering teams to integrate compliance into workflows in a remote environment.

Key responsibilities

• Architect and lead the implementation of an Integrated Management System (IMS) harmonizing requirements across multiple ISO standards
• Manage cross-functional projects to achieve and maintain product-level compliance certifications for DigitalOcean's cloud services
• Lead risk assessments and maintain a dynamic risk register, driving remediation for identified gaps

Required qualifications

• 5+ years of experience in GRC with a proven track record in multi-certification and multi-standard compliance programs
• Experience in building and maturing ISO programs
• Knowledge of risk identification and assessment methodologies
• Ability to navigate ambiguity within new standards and regulations
• Strong project management skills with experience managing complex, multi-quarter roadmaps