Senior Security Compliance Engineer

Responsibilities

• Translate regulatory and audit requirements (HIPAA, NIST 800-53) into scoped engineering tasks with clear acceptance criteria
• Maintain backlog hygiene across compliance initiatives for Azure DevOps/Jira features
• Test and validate technical security controls such as access restrictions, log retention and data deletion, documenting test outcomes
• Support third-party audits (FedRAMP, SOC 2) by mapping controls to evidence, coordinating data collection and delivering on schedule
• Develop recurring compliance reporting and create automation scripts or dashboards for monitoring and evidence collection
• Collaborate with ISRM, Privacy Office, Legal, SRE and platform teams to document shared versus owned controls in cloud architectures
• Monitor progress of identified compliance gaps to ensure timely remediation
• Assist with Significant Change Reviews (SCR) for FedRAMP and similar compliance frameworks
• Contribute to enhancing continuous improvement of compliance programs through process refinement and tooling updates

Languages