Security & Compliance Engineer

📋 Description Own security and compliance across the company, incl. infra and tooling. Maintain ISO 27001 and SOC 2 — audits, evidence, compliance. Lead customer-facing security questionnaires during enterprise sales. Maintain security documentation: internal policies, controls, runbooks. Drive remediation tasks from audits and penetration tests. Build internal AI tooling to answer security questionnaires. 🎯 Requirements Bachelor’s or Master’s in Computer Science, Information Security, or equivalent. 4+ years in a DevOps, cloud, or security engineering role. Hands-on ISO 27001 or SOC 2 certification ownership. Independent operator across audits, controls, documentation, remediation. Confident representing security posture in enterprise sales conversations. Experience with AWS and/or GCP infrastructure security. 🎁 Benefits Direct ownership — single point of accountability for security and compliance. Work directly with the CTO on strategy, not just execution. Build AI-powered internal tooling to automate compliance work. Autonomy and ownership from day one in a fast-moving environment. Remote-friendly with a senior, engineering-focused culture.