Cybersecurity Compliance Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $112k - $140k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

iSeatz

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 1999

🏨 Hospitality

📦 Logistics

📣 Marketing

Hospitality • Logistics • Marketing

iSeatz is a travel platform that provides modern loyalty technology and inspirational rewards, aimed at enhancing customer engagement throughout the travel journey. With a diverse portfolio offering everything from first-class flights to fitness classes and over 400,000 tours and activities, iSeatz captures and sustains customer interest from inspiration to destination. Their LXP™ (Travel-as-a-Service) platform focuses on creating personalized experiences, increasing customer loyalty and lifetime value by facilitating seamless trip management and communication, ultimately making it easier for travelers to check off their bucket lists.

📋 Description

• Support the Governance, Risk, and Compliance function while partnering with team leads, directors, and compliance auditors • Ensure products, systems, and processes meet regulatory, security, and compliance requirements • Manage day-to-day compliance activities across PCI DSS, SOC 2, NIST, GDPR, ISO, and customer-specific obligations • Lead internal and external audit preparation and execution, including evidence collection, control validation, auditor coordination, issue tracking, and remediation follow-up • Perform technical security and compliance reviews of third-party vendors and service providers • Support customer and partner security assessments, questionnaires, evidence requests, technical discussions, and contractual requirement validation • Evaluate new technologies and services for security and compliance risk • Translate compliance and regulatory requirements into technical and operational requirements for Engineering, DevOps, Product, and other teams • Support remediation of penetration testing and external audit findings • Review and validate controls related to IAM, logging and monitoring, vulnerability management, encryption, network security, secrets management, data protection, and secure development • Manage compliance controls and evidence in GRC and compliance automation platforms • Identify gaps through control testing, technical reviews, risk assessments, and monitoring; track remediation plans through completion • Conduct periodic risk assessments, access reviews, vendor reviews, policy reviews, and recurring compliance activities • Maintain policies, standards, procedures, control documentation, risk records, exceptions, and other compliance artifacts • Improve compliance processes through automation, monitoring, and efficient evidence collection and validation

🎯 Requirements

• Experience working in information security, audit, compliance, GRC, or a closely related technical field • Strong working knowledge of PCI-DSS assessments, including supporting assessments, control testing, evidence collection, and remediation activities • Understanding of IAM, encryption, vulnerability management, logging and monitoring, and data protection • Experience performing security and compliance reviews of systems, technologies, processes, or third-party service providers • Experience evaluating technical and administrative controls • Experience with risk assessments, control testing, compliance findings, and remediation tracking • Ability to understand technical architectures, system configurations, data flows, and security controls • Experience managing or supporting internal and external security and compliance audits • Strong documentation skills • Strong organizational and project management skills • Strong written and verbal communication skills • Experience with GRC or compliance automation platforms such as Drata, Vanta, Secureframe, AuditBoard, or similar tools • Relevant security, audit, risk, or compliance certifications such as CISA, CRISC, PCIP, CISSP, CIA, or ISO 27001 Lead Auditor/Lead Implementer (bonus) • Experience with NIST CSF, NIST 800-53, ISO 27001, or similar frameworks (bonus) • Experience supporting compliance programs in AWS or other cloud-native environments (bonus) • Experience mapping controls across multiple compliance frameworks (bonus) • Working knowledge of cloud security and compliance concepts, preferably within AWS environments (bonus)

🏖️ Benefits

• Robust health insurance • 401(k) plan with company matching • Generous paid time off • Up to eight weeks of paid parental leave for eligible caregivers • Remote-first flexibility and autonomy • Annual professional development allowance • Tools and support for employees to succeed • Reasonable accommodation for the application, interview, and employment process