Senior Compliance Engineer

About the role

As Hevo's enterprise customer base grows, security and compliance reviews are an increasingly visible part of how deals get done. We're looking for a Senior Compliance Engineer to own our GRC program end-to-end — audits, risk, vendor management, and policy — and to be the technical face of security and compliance to customers and prospects during due diligence.

What you'll do

• Own and operate our compliance programs (SOC 2, GDPR, HIPAA, DORA, DPDP as applicable) end-to-end — control implementation, evidence collection, and audit management
• Be the primary point of contact for external auditors; manage audit timelines and evidence collection
• Own the risk assessment program — identify, assess, score, track, and report risks via a risk register
• Manage vendor and third-party risk assessments and due diligence
• Respond to customer and prospect security questionnaires (RFPs, due-diligence requests, trust-portal access) with accuracy and speed — a high-visibility

What you need

• Compliance
• Due diligence
• Data privacy
• ISO 27001
• Customer success
• Negotiation

Good to have

• CISA
• AWS