Security and Compliance Engineer

Day to day

• Maintain compliance with relevant industry regulations and standards such as SOC2 ISO GDPR NIST etc
• Conduct routine internal audits to identify and address potential compliance gaps and status of the organization's security controls
• Conduct regular risk assessments and participate in risk assessment exercises to evaluate and track current risk within the organization
• Assist in the development of incident response plans and engage in incident response/disaster recovery exercises ensuring response activities align with relevant regulations and standards
• Assess and manage third-party vendor risks ensuring compliance with our security and data protection standards
• Continually review evolving regulatory landscapes and industry best practices pertaining to information security and privacy and proactively identify areas for improvement within our compliance program
• Foster a culture of security and compliance awareness through education and training to the greater organization
• Address customer security concerns and inquiries providing timely and transparent communication ensuring confidence in the security of our services
• Work closely with cross-functional teams such as security and engineering application and support teams to ensure communication of compliance initiatives relevant to organization
• Contribute your expertise to defining a long-term vision for securely improving and scaling our product