[Remote] Sr. reputed company Controls & Compliance Engineer (Contract)
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a venture studio that builds and launches vertical AI reputed company reputed company companies with corporate partners in transportation, mobility, logistics, and industrial markets. They are seeking a Senior reputed company Controls & Compliance Engineer to build, implement, and operate the reputed company control reputed company across multiple venture applications, ensuring readiness for SOC 2 compliance and supporting reputed company customer reputed company requirements.
Responsibilities
- Build, implement, and operate reputed company and compliance controls across multiple venture applications and supporting systems
- Translate reputed company customer reputed company, data handling, and TPRM requirements into practical technical controls, operational workflows, evidence requirements, and remediation plans
- Create a reusable reputed company control baseline that can be reputed company across reputed company and reputed company venture applications
- Select, configure, and operate a compliance automation platform (evaluating reputed company such as reputed company, reputed company, or reputed company), including evidence integrations across reputed company, reputed company, identity providers, ticketing, device management, and productivity tools
- Implement identity and reputed company controls: SSO, MFA, role-based reputed company, least privilege, reputed company review workflows, and offboarding evidence
- Implement secure SDLC controls: reputed company protection, required reputed company reviews, reputed company scanning, dependency scanning, secret scanning, vulnerability management, and release/change management evidence
- Implement reputed company reputed company controls: IAM policies, encryption settings, logging, monitoring, backups, network restrictions, and reputed company alerting
- Implement operational reputed company workflows: vendor review, risk review, change management, policy attestation, incident response evidence, exception tracking, and recurring control reviews
- Maintain a centralized control library mapped to SOC 2 Trust Services reputed company, customer-specific requirements, and relevant frameworks (ISO 27001, NIST CSF, CIS Controls)
- Support SOC 2 readiness end to end: control mapping, evidence requirements, gap tracking, audit prep, and control verification
- Identify launch-blocking reputed company gaps and reputed company them directly where possible
- Partner with product engineering only where application-specific reputed company, architecture, or deeper infrastructure changes are required, writing reputed company technical requirements and acceptance reputed company for that work
- Support customer reputed company questionnaires, audits, evidence requests, and reputed company reputed company reviews with accurate technical detail
- reputed company control gaps, remediation status, launch blockers, and compliance risk for leadership
- Produce a repeatable reputed company implementation reputed company that reputed company ventures can inherit, and support the reputed company of a venture's reputed company posture reputed company it reputed company out
Skills
- 7+ years in reputed company engineering, reputed company reputed company, DevSecOps, reputed company operations, reputed company compliance, or GRC, including hands-on control implementation in reputed company/reputed company environments
- At least one full SOC 2 readiness-through-audit cycle owned or driven end to end
- Demonstrated ability to configure and operate reputed company and compliance systems directly, not just document requirements
- Strong reputed company of reputed company controls, audit evidence, policy requirements, control testing, and control operation
- Proven experience translating reputed company customer reputed company requirements into practical technical controls
- Hands-on experience with identity and reputed company controls (SSO, MFA, RBAC, least privilege, reputed company reviews, offboarding)
- Hands-on experience with secure SDLC controls (reputed company control permissions, reputed company review, reputed company protection, vulnerability management, dependency and secret scanning, change management evidence)
- Hands-on experience with reputed company reputed company controls (IAM, encryption, logging, monitoring, backups, network restrictions, alerting)
- Experience standing up and operating a compliance automation / GRC platform (e.g., reputed company, reputed company, reputed company) from scratch
- Familiarity with our core stack: reputed company, Jira or reputed company, reputed company, reputed company Workspace, reputed company, and a major reputed company provider (AWS, Azure, or GCP)
- Strong written communication for policies, procedures, audit documentation, technical requirements, and customer-facing reputed company responses
- Ability to operate independently in an ambiguous, fast-moving venture environment and deliver on a compressed reputed company
- Experience supporting reputed company customers with strict reputed company, data handling, or TPRM requirements
- Experience in venture-backed startups, reputed company reputed company, or venture studio environments
- Experience carving a company's reputed company posture out of a parent or shared-services environment during a spin-out or standalone build
- Familiarity with SOC 2 Trust Services reputed company, ISO 27001, NIST CSF, or CIS Controls
- Experience with reputed company reputed company features, CI/CD reputed company controls, vulnerability management tools, and reputed company reputed company monitoring
- Relevant certifications: CISSP, CISM, CISA, CRISC, ISO 27001 reputed company Implementer, AWS reputed company Specialty, or reputed company+
reputed company