Security Compliance Specialist
RemoteFull-time2–6 yrsPosted 5 days ago
Mid-level legal role at Jobgether. Needs 2+ years. Remote.
About the role
This role offers the opportunity to strengthen the security and compliance posture of a global technology environment supporting cloud, edge, and web security platforms. You will help assess the effectiveness of security controls, identify risks, and support audits against recognized international standards.
What you'll do
- Conduct security control testing and evaluations to assess design and operational effectiveness across technical, physical, and organizational controls
- Assess controls against industry frameworks and standards, including SOC 2, ISO 27001, and PCI DSS
- Coordinate sampling populations and lead technical walkthroughs with Engineering, DevOps, IT, and system owners
- Review technical documentation and evidence to verify control implementation and effectiveness
- Identify control gaps, assess associated risks, and document exceptions and recurring trends in the Governance, Risk, and Compliance (GRC) platform
What you need
- Compliance
- ISO 27001
- IAM
- Vulnerability assessment
- Documentation
Good to have
- CISA
- CISM