Staff Security Engineer – Compliance

🔥 18 hours ago

🏄 California – Remote

🏄 California – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

ServiceNow

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 2004

🏢 Enterprise

☁️ SaaS

🤖 Artificial Intelligence

💰 Post-IPO Equity on 2022-12

Enterprise • SaaS • Artificial Intelligence

ServiceNow is a platform that offers AI-powered solutions and automation for businesses to enhance productivity and streamline workflows. Its AI agents are designed to autonomously learn, reason, make decisions, and take action to transform business processes across various domains such as IT, HR, customer service, and app development. The platform enables organizations to integrate data from diverse sources, facilitating business transformation and operational efficiency. Recognized for its leadership in AI IT service management and trusted by a significant portion of the Fortune 500, ServiceNow collaborates with other global leaders like Microsoft and AWS to bring advanced AI capabilities to modernize business operations.

📋 Description

• Build and own automated evidence collection pipelines integrating with cloud infrastructure, identity providers, source control, ticketing systems, and security tooling • Design and implement continuous control monitoring so compliance is measured in real time • Replace manual, paper-driven compliance processes with software and engineering-first systems • Own the technical strategy for future certifications and regulatory frameworks • Evaluate new requirements and design scalable solutions that minimize operational overhead • Apply LLMs and agents to map controls to evidence, validate evidence, and flag drift • Lead compliance initiatives including ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, SOC 2 Type 2, CSA STAR Level 2, NIST 800-171, and GDPR • Navigate auditor relationships and ensure smooth, compliant audits • Partner with stakeholders to implement compliance and controls and remediate findings • Create and transform policies, procedures, and other compliance documentation • Own software engineering behind compliance certifications and lead technical engagements with external auditors

🎯 Requirements

• US Citizenship required • 8+ years of experience in information security roles, with a specific focus on security compliance and risk management • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field • Demonstrated experience developing, managing, and implementing security policies and compliance frameworks such as ISO 27001, ISO 42001, NIST, GDPR, and SOC 2 Type 2 • Knowledge of security principles, controls, and technologies/products • Familiarity with cloud security practices and cloud provider compliance standards (AWS, Azure, GCP) • Expertise with AWS services • Exceptional communication, written, and presentation skills capable of engaging a wide range of stakeholders • Skills in identifying security risks, implementing mitigation strategies, and driving remediation end-to-end • Experience navigating international and domestic security regulations

🏖️ Benefits

• Flexible or remote work persona • Flexible and trusted distributed work environment • Reasonable accommodations during the application process

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume