Security Engineer

Responsibilities:

• Lead end-to-end PCI DSS compliance, including CDE scoping and reduction, control implementation/validation, and audit management (RoC/SAQ, QSAs).
• Lead and support SOC 2 Type II attestation initiatives, including TSC mapping, evidence collection, control testing, and remediation tracking
• Support and maintain ISO 27001 ISMS, including risk assessments, SoA, internal audits, and continuous improvement activities

Qualifications:

• 4.5+ years of experience in GRC, risk management, or compliance , with exposure to technical security controls .
• Strong hands-on experience with PCI DSS, including audits, CDE scoping, and control validation
• Experience implementing and maintaining ISO 27001 ISMS, including risk assessments and Annex A controls

Skills:

• Ability to interpret technical security concepts such as cloud architecture, network segmentation, access controls, and vulnerability reports
• Strong analytical, documentation, and stakeholder communication skills
• Experience working in cloud-native or SaaS environments