Compliance Engineer

Introduction
We are seeking a skilled Compliance Engineer to join our dynamic team, responsible for deploying, supporting, and reporting on security controls to ensure corporate, industry, and regulatory compliance across multiple IBM Software products.

Join us in our mission to ensure the highest standards of security and compliance across our software products. If you possess the required expertise and are eager to contribute to our dynamic team, we look forward to hearing from you.

Your Role and Responsibilities

Experience: Demonstrate proficiency in a compliance role within a SaaS organization.

Security Tooling: Possess deep knowledge of security auditing and compliance tools such as Vulnerability scanners(Nessus), SIEM, EDRs, etc.

Cloud Security: Have foundational knowledge of Cloud Security in AWS, IBM Cloud, or similar hyperscalers.

Audit Support: Assist in security audits conducted by third parties and possess a working knowledge of compliance frameworks like ISO27001, PCI-DSS, SOC2, etc.

DevOps Integration: Help design and implement security controls into DevOps pipelines to enhance security practices.

Issue Resolution: Troubleshoot, triage, and resolve security issues across Dev, Test, and Production environments.

Cross-Functional Collaboration: Engage with other business units to drive deployment and maintenance initiatives.

Team Collaboration: Collaborate with other teams to identify areas for improvement and opportunities.

Automation: Utilize scripting technologies like Python, Bash, and Ansible to automate deployment, configuration, and various compliance activities.

Required Technical and Professional Expertise

• Education: Bachelor's degree in Computer Science, Management Information Systems, or related discipline, or equivalent work experience.
• Technical: Python, Javascript, Knowledge with Both SQL and NoSQL Database implementations; Knowledge with Frontend Technology - React/Angular/Vue anyone"
• Agile Methodologies: Solid understanding of the agile software. development life cycle, continuous integration, and continuous delivery.
• Adaptability: Demonstrated willingness and aptitude for learning new skills. Virtualization: Understanding of virtualization technologies such as VMWare, VirtualBox, Proxmox, etc.
• Cloud Experience: Experience working with high availability, high-performance, multi-data center systems, multi cloud environments.
• Technology Knowledge: Knowledge of related technologies including encryption, IPsec, VLANs, VPNs, routing, firewalls, proxy services, LAN/WAN connectivity.

Preferred Technical and Professional Expertise

Communication Skills: Excellent communication and technical documentation skills, including the ability to discuss complex topics with both technical and executive stakeholders.

Compliance Standards: Knowledge of varying compliance standards and their relevance to regulated customers.