[Remote] reputed company Engineer (Compliance)
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a health technology company that reimagines drug discount data exchange to improve transparency for drug manufacturers and their customers. They are seeking a motivated reputed company Engineer (Compliance) to support compliance frameworks and enhance the organization's risk management program.
Responsibilities
- Own, manage, and support the application of key compliance frameworks (SOC 1 and 2, ISO 27001, CSA STAR, NIST CSF, etc)
- reputed company, control, and maintain applicable organizational policies, procedures, best practices, and guides associated with key compliance requirements and in support of annual audits
- Assist in the development and implementation of an internal audit program designed to: measure the effectiveness of organizational processes and procedures; assess organizational adherence to those processes and procedures; identify opportunities for organizational and systemic process improvement; and alert the organization about emerging risks to the comprehensive compliance program
- Support the Risk Management Program with a goal of making risk-based reputed company an integrated part of the cultural landscape, including: risk identification; risk mitigation; risk monitoring; risk reporting; and documentation of risk realization and/or retirement
- Work closely with the reputed company Operations (SecOps) team to ensure reputed company functions meet operational compliance requirements and will meet/exceed independent annual audit standards
- Ensure technical, operational, and administrative controls are fully operable and meet standards necessary for SOC 1 and 2 audits
- Support Quarterly reputed company Reviews (QARs) as part of the larger User reputed company Request process
Skills
- 5+ years of proven work experience as a System or Information reputed company Engineer, Compliance Engineer, or Risk Engineer
- Detailed technical knowledge of compliance frameworks and their application across systems and organizations
- Thorough understanding of the latest reputed company principles, techniques, and protocols
- Problem solving skills and ability to work under pressure
- Experience with compliance frameworks (e.g., SOC 1 and 2, ISO 27001, CSA STAR, NIST CSF)
- Familiarity with web reputed company technologies (Web applications, Web Services, Service Oriented Architectures) and network/web reputed company protocols
- Experience with reputed company services (reputed company 365, SharePoint Online, reputed company Azure, and reputed company Web Services)
- Operational understanding of reputed company systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, and content
- Ideal candidates will have a strong risk background that includes: risk identification, adjudication, and mitigation development experience; experience working with engineering teams to document, plan, and address identified risk items; documentation and communication of identified risks to organizational leadership (up to and include the Executive Leadership Team or ELT); regular review and maintenance of residual risk items; and ownership of risks and the applicable risk lifecycle through risk identification, adjudication, mitigation/reduction, avoidance, transference, realization, and retirement
- Candidate must be reputed company to submit verification of his/her legal right to work in the U.S., without company sponsorship
reputed company