Senior Risk and Compliance Engineer

What you will do

• Serve as a central point of coordination for the development team, ensuring SOC audit requirements are clearly defined and understood
• Establish and maintain compliance frameworks, security controls, and risk management processes for our cloud-based infrastructure (AWS preferred, Azure a plus)
• Ensure individual engineers and engineering managers spend less time on non-engineering processes and activities
• Make sure the engineering department as a whole smoothly and efficiently executes non-engineering processes and activities
• Collaborate with internal teams (engineering, security, legal, and leadership) to ensure compliance requirements are built into infrastructure, systems, and software development processes
• Conduct internal audits and risk assessments to identify compliance gaps, recommend improvements, and track remediation efforts
• Manage external audits and coordinate with third-party assessors to ensure successful certification and compliance renewals
• Own and execute Engineering Readiness Management policy and related processes
• Help execute other non-engineering processes (e.g. Risk Management, Incident Management) inside the engineering department
• Drive technical compliance reviews for relevant engineering projects at application and infrastructure levels, to ensure adherence to compliance standards
• Maintain and track compliance tasks schedule, initiating all the necessary internal processes
• Streamline and document processes across all three platforms, keeping them updated as changes occur to ensure year-round compliance and audit readiness, maintaining and improving related organizational knowledge
• Align external audit controls with additional partner-related obligations to simplify and consolidate implementation methods and evidence collection
• Act as a bridge between engineering, leadership, and external auditors, facilitating smooth communication and reducing the risk of exceptions or qualifications during the audit process.

What skills and experience you bring

• Bachelor’s degree, or equivalent experience
• 5+ years of experience with technology compliance across domains such as Access Management, Configuration Management, Change Management, Ads Revenue, Information Security, etc. in a Cloud Environment
• 3 years of experience with AWS and Azure
• Strong knowledge of industry-specific regulations, compliance frameworks, and standards including but not limited to: SOC 1/2, GDPR, CCPA, and various cloud vendor partnership level requirements
• Experience with open source compliance and online advertising industries (B2C and B2B)
• Hands-on experience implementing security controls in AWS and Azure cloud environments (IAM, encryption, logging, monitoring)
• Strong technical background in security architecture, risk assessment methodologies, and vulnerability management
• Proven experience in conducting engineering / system compliance reviews
• Ability to manage multiple projects and deadlines with high quality
• Detail-oriented, analytical, tech-savvy, and adept to navigate through tools, systems, and platforms
• Project management, teamwork, interpersonal, verbal, and written communication skills, attention to detail, and ability to communicate with all levels of management
• Self starter, motivated and proactive with strong organizational and project management skills to multitask, thrive, and succeed in a fast-paced environment
• Certifications in one or more of the following areas: CISSP, CISA or similar is a plus