Security Engineer

• Serve as the primary administrator for Vanta.
• You will manage continuous compliance monitoring daily, triage failing tests, automate evidence collection, and ensure our security posture remains audit-ready year-round.
• Own the relationships with third-party security vendors.
• You will hold vendors accountable to SLAs, ensure they deliver high-quality work, and conduct security reviews for new software procurement.
• Serve as the primary point of contact for audits.
• Maintain our ISO 27001 certification and lead the hands-on implementation for future compliance initiatives such as SOC 2 Type II and HITRUST.
• Partner directly with Software Engineering and DevOps to configure cloud security controls in AWS, review Infrastructure as Code, and integrate security tools into the SDLC.
• Manage day-to-day security operations, including vulnerability management, incident response, and access control reviews.
• Act as a subject matter expert internal business units, helping them understand and navigate security requirements in government and healthcare contracts.
• Partner closely with the IT Support team to design and validate secure configuration standards for laptops and mobile devices.

Head of Security and Compliance

Cybersecurity Architect

Senior Manager, IT Security & Compliance

Information System Security Manager – ISSM

Information System Security Officer – ISSO