Security Engineer

• Translate ESG business objectives into actionable GRC strategies, leveraging deep product and team process understanding to create clear compliance strategies.
• Facilitate and complete all product certification activities, including financial stewardship and contract reviews as needed.
• Achieve and maintain certifications, proactively identifying and mitigating risks for continuous compliance.
• Support the ESG Product Security (ProdSec) team in security compliance activities (risk assessment, secure software development), providing expert guidance to enhance overall security posture.
• Author and maintain required certification documents.
• Communicate and translate certification requirements (ISO, SSAE 18, NIST, etc.) to engineering teams, providing expert guidance.
• Maintain current understanding of regulations; interpret and communicate changes and their implications to stakeholders.
• Track milestones, proactively manage risks, and drive solutions to completion.
• Drive completion of any customer supplier risk requests by leveraging existing information and resources.
• Monitor schedule deviations and develop corrective actions.
• Coordinate cross-timezone team activities, including occasional off-hours interaction.
• Lead the identification, evaluation, and implementation of automation tools and processes for security compliance activities, including evidence collection, control validation, and reporting.
• Develop and implement technical strategies for efficient and accurate evidence gathering, ensuring data integrity and audit readiness.
• Collaborate with engineering, ProdSec, and InfoSec teams to integrate security compliance requirements into CI/CD pipelines and automated testing frameworks.
• Identify opportunities for proactive risk identification and mitigation strategies across product lines, influencing product development and operational practices.
• Exercise good judgment in achieving compliance objectives and resolving audit findings.
• Independently manage and prioritize multiple security compliance projects, providing regular updates and data presentations to stakeholders.

Senior Security and Compliance Engineer

Senior Cybersecurity Solution Analyst

Security Engineer

Security Program Director

Senior Manager, IT Security & Compliance

Information System Security Manager – ISSM