Technical Compliance Engineer

Responsibilities

Build and maintain technical controls across SOC 2, ISO 27001, HIPAA, and other security and compliance frameworks.

Automate compliance workflows, evidence collection, access reviews, security checks, and repetitive processes.

Implement and monitor controls for access management, infrastructure, data protection, logging, and vulnerability management.

Own technical evidence collection and support audits and auditor requests.

Respond to customer security questionnaires, compliance requirements, and technical due diligence.

Identify compliance and security gaps and build scalable systems to address them.

Requirements

Technical background in software engineering, security, infrastructure, IT, or a related field.

Strong scripting or programming skills in Python, JavaScript/TypeScript, Bash, or a similar language.

Understanding of IAM, encryption, networking, logging, vulnerability management, and cloud security.

Ability to learn security and compliance frameworks and translate requirements into technical solutions.

Analytical problem-solving skills and comfort working through ambiguous problems.

Ability to collaborate across Engineering, Security, Legal, and customer-facing teams.

Clear communication skills for explaining technical and compliance concepts to technical and non-technical audiences.

Experience with SOC 2, ISO 27001, HIPAA, or other compliance frameworks is preferred.

Experience with AWS, GCP, Vanta, Drata, Wiz, Okta, or similar tools is preferred.

Benefits

Remote work arrangement.

Available as full-time employment or part-time 1099 contract work.

Must be available for some overlapping hours with the Pacific Time team and customers.