Compliance Automation Engineer

About the Role

Join our Governance, Risk, and Compliance (GRC) team as a Compliance Automation Engineer to significantly enhance our global compliance posture. This role is crucial for embedding security requirements and data governance principles across the organization, ensuring we operate with the highest standards.

Responsibilities

• Design and automate control testing and evidence collection to reduce manual effort and improve accuracy.
• Build and maintain scripts and APIs across infrastructure, endpoints, and SaaS platforms (e.g., AWS, GitHub, Okta) that interface with compliance tooling.
• Support recurring internal and external audits (i.e., SOC 2, ISO 27001, PCI DSS, etc.) by ensuring reliable control monitoring.
• Champion security, compliance, data governance strategies and processes, including data deletion, data retention, and data storage.
• Leverage AI/ML tools to improve efficiency and outcomes for GRC processes and overall compliance posture.
• Define technical control requirements and collaborate with internal partners to embed compliance checks into CI/CD pipelines and infrastructure deployment workflows.

Requirements

• Experience in scripting or automation with a focus on security, infrastructure, or GRC.
• Knowledge of audit processes, evidence requirements, and remediation actions for security and compliance frameworks (i.e., SOC 2, ISO 27001, PCI DSS).
• Ability to write scripts and basic code to automate audit and evidence gathering processes.
• Ability to build API endpoints and command-line tools, work with structured data (JSON, CSV, YAML), and extract compliance-relevant information from security, IT, and GRC systems.
• Experience owning a project or scope, building relationships, collaborating with both technical and non-technical teams, and driving initiatives to completion.

Nice-to-Haves

• Familiarity with data governance, compliance, or software development tools and systems (e.g., Drata, Satori, GitHub).
• Experience with frontend cloud, AI/ML systems, and open source development.
• Experience with FedRAMP or NIST frameworks, such as 800-53, 800-171, RMF.
• Security certifications (e.g., CISA, CISSP).