D
DigitalOceanRemote
Senior Security Engineer I
United States of America
Full Time
4 weeks ago
$140,000 - $165,000 USD
H1B Sponsor LikelyKey skills
AIDigitalOceanProject Management
About this role
DigitalOcean is a leading technology company focused on simplifying cloud and AI for builders. They are seeking a Senior Security Engineer I to lead the strategic maturation of their compliance framework, integrating compliance into workflows and ensuring the platform remains trusted for customers.
Responsibilities:
- Architect and lead the implementation of an Integrated Management System (IMS) that harmonizes requirements across multiple ISO standards
- Manage cross-functional projects required to achieve and maintain product-level compliance certifications and/or eligibility for DigitalOcean’s core and emerging cloud services
- Lead both annual and ad-hoc risk assessments; maintain a dynamic risk register and drive cross-functional remediation for identified gaps
- Design and implement controls which meet rigorous standards without sacrificing velocity
- Author and maintain enterprise-level security policies, standards, and procedures that reflect current regulatory landscapes, internal risk appetite, and operational engineering realities
- Act as a subject matter expert in GRC on-call rotations, directly address complex customer inquiries, and support incident response activities to ensure compliance obligations are met under pressure
Requirements:
- 5+ years of experience in GRC, with a proven track record of leading multi-certification and multi-standard compliance programs, preferably at a technology company, where you directly partnered with engineering or infrastructure teams
- Experience building, maturing, and expanding the influence of an ISO program
- Experience in risk identification, various risk assessment methodologies, discerning between appropriate risk responses, and monitoring risk treatment plans
- Comfortable working cross-functionally to interpret ambiguity within new standards (e.g., ISO 42001), regulations, and legislation
- Ability to translate complex legal and regulatory requirements into actionable, testable controls for engineering, product, and IT teams
- Strong project management skills and the ability to manage complex, multi-quarter roadmaps involving dozens of stakeholders
- Relevant industry certifications such as a CRISC or ISO 27001 Lead Implementer
- Familiarity with prominent privacy legislation (e.g., GDPR/CCPA) as it relates to ISO 27701