This is a fully remote Security Compliance Engineer position supporting a global SaaS platform. You will play a key role in securing cloud infrastructure and ensuring alignment with critical compliance standards including GDPR, SOC2, ISO, and others. Your work will directly impact the integrity, privacy, and resilience of systems handling digital media for international clients.
Key Responsibilities
- Design and deploy security controls across cloud environments, with a primary focus on AWS and infrastructure-as-code using Terraform.
- Partner with internal teams to integrate compliance requirements into existing security frameworks and prepare for external audits.
- Conduct risk evaluations, strengthen data protection measures, and verify adherence to regulations such as GDPR, SOC2, and ISO standards.
- Ensure proper configuration and alignment of security controls with overall organizational strategy.
- Proactively detect, assess, and resolve vulnerabilities across systems and services.
- Stay current with evolving compliance mandates and security technologies to continuously improve infrastructure safeguards.
- Support secure software development practices by working closely with engineering teams.
- Maintain system reliability through timely patching and updates to AWS resources using Terraform.
- Lead periodic compliance reviews to evaluate policy adherence, identify gaps, and recommend corrective actions.
Required Qualifications
- Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field.
- Minimum of four years of experience in security and compliance roles.
- Hands-on experience with vulnerability management tools, remediation workflows, and reporting processes.
- Proficiency with Docker, Terraform, and AWS cloud services.
- Familiarity with DevOps, IAM, network and system security, cryptography, and infrastructure-as-code (IaC) principles.
- Working knowledge of compliance frameworks such as GDPR, SOC2, and ISO standards.
- Strong background in cloud security, particularly within AWS environments.
Preferred Qualifications
- Experience with cybersecurity standards including ISO 27001, NIST, PCI-DSS, GDPR, and CCPA.
- Track record of developing and maintaining security policies, procedures, and governance documentation.
- Experience using automated tools for compliance monitoring and security validation.
- Understanding of AI models and secure integration practices.
- Ability to thrive in fast-moving, agile environments.
- Strong communication skills for engaging with technical teams and regulatory stakeholders.
- Prior experience in enterprise security environments is advantageous.
Work Environment & Benefits
This role operates in a fully remote setup with no geographic restrictions—just a reliable internet connection is required. The team values accountability, collaboration, and trust. We offer flexible hours and support remote work from any location worldwide.
Compensation is competitive, with performance-linked incentives. Health coverage extends to employees and their families. We provide financial support for home office setups or co-working spaces, along with a dedicated fund for professional development and personal wellness activities. A no-questions-asked leave policy ensures work-life balance, and team off-sites are held in diverse locations to foster connection and morale.
