Senior Security Assurance Engineer

What you'll do

• Design, document, and maintain IT General Controls and security controls across the corporate and business systems estate.
• Map shared controls to satisfy multiple regulatory frameworks including SOX, SOC 2, ISO 27001, and PCI-DSS from a single evidence base.
• Establish standards and control requirements for the governed use of AI tools and integrations across company systems.
• Perform recurring compliance monitoring for user access, privileged access, change management, and configuration baselines.
• Advise engineering teams on control requirements during system implementations, migrations, and significant changes before go-live.
• Manage SOX ITGC testing and coordinate evidence collection for internal and external audits while automating manual processes.
• Identify and lead the remediation of control deficiencies and risks across the infrastructure.
• Partner with Security Governance to develop and review corporate security policies and acceptable use standards.

What we're looking for

• Hold a BA/BS degree in a business or technology field or possess equivalent experience.
• Have 5+ years of experience in IT compliance, security compliance, IT audit, information security, or information technology.
• Demonstrate experience testing and documenting controls against frameworks like COSO, COBIT, NIST CSF, ISO 27001, SOC 2, and SOX ITGC.
• Possess experience assessing controls within SaaS and cloud-native application stacks.
• Maintain working knowledge of identity and access management including SSO, SCIM, RBAC, and privileged access.
• Demonstrate familiarity with AI governance concepts and the control risks associated with AI tools and integrations.
• Experience contributing to security policies, standards, and procedures in partnership with a governance function.
• Possess exceptional written and verbal communication skills for interacting with leadership, engineering teams, auditors, and legal counsel.