Security Governance Engineer, Secure, Build & Change

What you'll do

• Translate enterprise security policies and regulatory requirements into measurable, technically actionable controls.
• Develop and maintain security policies, technical standards, and control requirements.
• Manage the policy lifecycle including versioning, approvals, exceptions, and change management.
• Define machine-readable policy and control requirements for Governance-as-Code initiatives.
• Maintain a common control framework with clear objectives, ownership, and validation criteria.
• Act as the Subject Matter Expert for assigned domains like IAM, Cloud, or Data Protection.
• Interpret regulations to assess gaps, exceptions, and emerging risks while recommending improvements.
• Provide a governance perspective during architecture and design discussions with engineering teams.

What we're looking for

• U.S. Citizenship or Permanent Residency is required.
• 2+ years of experience in information security governance, security engineering, technology risk, or related functions.
• Strong grasp of security policies, standards, control frameworks, and governance processes.
• Familiarity with NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, or PCI DSS.
• Ability to translate regulatory and security requirements into measurable control objectives.
• Working knowledge of cloud security (AWS, Azure, or GCP), IAM, application, infrastructure, and data security.
• Understanding of control design (preventive and detective), risk assessment, and exception management.
• Familiarity with modern development practices, cloud environments, and CI/CD (preferred).