Security Engineer (Governance, Risk & Compliance)

About the role

We are seeking an experienced Security Engineer with strong expertise in governance, risk, and compliance to strengthen our enterprise security posture. The role will align security practices with frameworks such as NIST, ISO 27001, and PCI‑DSS while driving risk management and audit readiness.

Key responsibilities

• Drive security governance initiatives and ensure alignment with NIST CSF, ISO 27001, and PCI‑DSS.
• Perform security risk assessments, control testing, gap analysis, and maintain risk registers.
• Support internal and customer audits by preparing evidence, policies, standards, and procedures.
• Define and maintain information security policies, standards, and compliance checklists.
• Collaborate with infrastructure, application, and cloud teams to implement and validate security controls.
• Assist in vulnerability management and remediation tracking in coordination with SOC/IT teams.
• Support the incident response lifecycle from a compliance perspective, including playbooks and reporting.
• Create security awareness inputs and contribute to continuous improvement of the security posture.

Required profile

• 7+ years of security experience with a focus on compliance and security frameworks.
• Hands‑on experience with NIST CSF/800‑series, ISO 27001 controls, and PCI‑DSS requirements.
• Ability to translate compliance requirements into technical and process controls.
• Strong documentation skills for policies, SOPs, audit evidence, and control narratives.
• Effective stakeholder management with internal teams and external auditors.
• Bachelor’s degree in Computer Science, IT, Cybersecurity or equivalent.
• Relevant certifications such as ISO 27001 Lead Auditor/Implementer, CISA, CISSP, CCSP, Security+ are preferred.

Required skills

• NIST CSF / NIST 800‑series
• ISO 27001
• PCI‑DSS
• Risk assessment and gap analysis
• Vulnerability management
• Incident response (compliance perspective)
• Security policy and standards development

What we offer

• Competitive salary and benefits package.
• Culture focused on talent development with quarterly growth opportunities and company‑sponsored education and certifications.
• Opportunity to work with cutting‑edge technologies.
• Employee engagement initiatives such as project parties, flexible work hours, and long‑service awards.
• Annual health check‑ups and insurance coverage for employee, spouse, two children, and parents.