RemoteLeaf Logo
Log in Sign up

Senior Security Compliance Engineer

2 weeks, 6 days ago
United States
Full-time
Senior
Security Engineer
DevOps and Infrastructure
AWS CI/CD Go HIPAA Kubernetes Python REST API SQL
Apply Now
Klaviyo

Klaviyo

Klaviyo offers intelligent email marketing, SMS, and automation services for ecommerce businesses, empowering brands to personalize customer interactions and drive growth.

IT Services
1K-5K
Founded 2012
View All Jobs 19

Description

  • Design, develop, and maintain automated compliance workflows for evidence collection, control validation, and audit readiness.
  • Build and improve continuous control monitoring capabilities to surface compliance gaps in real time.
  • Partner with the Security Risk team to connect compliance findings and control observations to risk management workflows.
  • Implement and customize compliance automation platforms and integrate them with internal systems, CI/CD pipelines, and cloud infrastructure.
  • Advise Engineering and Product teams on compliance-by-design and security control requirements.
  • Identify and drive opportunities to use AI and automation to reduce toil and scale compliance programs.
  • Support audits and compliance operations for SOC 2, ISO 27001, ISO 27017, PCI, and SOX ITGCs.
  • Collaborate cross-functionally with teams including Engineering, IT, Security, Legal, and Internal Audit.

Requirements

  • 3–5 years of experience in security compliance, GRC engineering, security engineering, or a closely related field.
  • Strong emphasis on automation and scalable processes.
  • Understanding of modern cloud-native web application architectures and security best practices, especially in AWS, Kubernetes, and AI contexts.
  • Experience implementing and operating compliance automation platforms such as Drata, Vanta, Anecdotes, or HyperProof.
  • Hands-on experience executing compliance programs for SOC 2, ISO 27001, ISO 27017, PCI, and/or SOX ITGCs.
  • Proficiency in one or more scripting or programming languages such as Python, Go, or SQL.
  • Hands-on experience building automation for compliance workflows, integrating REST APIs, and working with GRC tooling.
  • Experience applying GRC Engineering principles, including automation, systems and design thinking, and threat-informed GRC.
  • Strong bias toward evidence, logic, math, and reason when communicating risk.
  • Excellent ability to plan, prioritize, and deliver results cross-functionally and on time.
  • Ability to discuss complex technical topics with both technical and non-technical audiences, especially software engineers.
  • Strong alignment with Klaviyo’s core values.
  • Preferred: experience implementing identity governance tools and processes such as user access reviews (UARs) and just-in-time access (JITA).
  • Preferred: experience in security operations, security engineering, and/or security architecture roles.
  • Preferred: experience with additional compliance frameworks such as ISO 27018, HIPAA, GDPR, CCPA, or NIS2.

Benefits

  • Base salary range of $120,000–$180,000 USD for U.S. locations.
  • Eligibility for the company’s annual cash bonus plan.
  • Possible equity compensation and sign-on payments.
  • Comprehensive health, welfare, and wellbeing benefits based on eligibility.
  • Support for remote or location-based hiring with recruiter-provided salary details by preferred location.
  • Up to 10% travel for onboarding, team meetings, client or partner work, and industry events, coordinated in advance.
  • Accommodations available as needed for responsible use of AI in the interview process.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Hasbro

Principal Identity Engineer

Hasbro 5K-10K Consumer Goods

Wizards of the Coast is hiring a Principal Identity Engineer to own the technical direction of its enterprise identity architecture, supporting Zero Trust, privileged access, and identity governance across cloud and on-premises environments.

United States Full-time Lead Security Engineer
$173k-$259k
Active Directory CI/CD Git OpenID Connect PowerShell Pulumi Python REST API SAML Terraform
14 hours, 30 minutes ago
Dragos

Senior Device Engineer

Dragos 251-1K Professional Services

Dragos is hiring a Senior Device Engineer to build automation software that identifies, fingerprints, and interacts with network-connected devices across critical infrastructure environments.

United States Full-time Senior Embedded Systems Engineer Security Engineer
$165k-$165k
Cybersecurity Docker Embedded Systems Go HTTP JavaScript Node.js TCP/IP TLS TypeScript
14 hours, 30 minutes ago
Jolera

Elastic Engineer

Jolera 251-1K Internet Software & Services

Jolera is seeking an Elastic Engineer to design and operate scalable Elasticsearch-based environments for cybersecurity analytics, threat hunting, and detection workflows.

India Full-time Senior DevOps Engineer Security Engineer
Cybersecurity Elasticsearch Encryption Java Kibana Linux Logstash Machine Learning Python Ruby
15 hours ago
BeyondTrust

Staff Software Development Engineer - Windows Endpoint

BeyondTrust 1K-5K Professional Services

BeyondTrust is hiring a Staff Software Development Engineer to own Windows kernel-mode enforcement for its Identity Security Platform, building real-time security controls that decide whether actions on Windows endpoints are permitted or denied.

United States Canada Full-time Lead Security Engineer Software Engineer
Agile C C++ Rust
15 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers