Technical Risk and Compliance Professional

Support engineering teams in identifying, assessing, and managing technical and operational risks

Gather, structure, and maintain a clear overview of the technology risk landscape and ownership

Ensure risk mitigation plans are defined, tracked, and executed effectively

Translate compliance frameworks (e.g. SOC 2, ISO 27001) into practical engineering processes

Improve control effectiveness by simplifying, standardizing, and automating controls

Build scalable and repeatable processes for audit evidence gathering and act as first point of contact for auditors

Implement continuous monitoring and automation of controls within CI/CD and infrastructure workflows

Act as the bridge between Engineering, Risk & Compliance, and external auditors

Experience supporting audits from within an engineering or platform team

A pragmatic mindset and the ability to challenge ineffective or overly complex controls

Experience automating controls and evidence collection in cloud-native environments