Cloud Compliance Engineer

The Cloud Compliance Engineer will be responsible for architecting,developing and implementing solutions that help Rhymetec’s clients achieve, manage and measure security metrics and compliance requirements. The role will work closely with engineering teams to help design, development and deliver security and compliance objectives and have the ability to help drive foundational changes in internal cloud platforms to enhance their security posture.

Responsibilities:

• Perform day-to-day compliance reviews (vendor security reviews, SaaS access reviews, data mapping, data privacy requests, etc.)
• Develop and update standards, policies and procedures as well as best practices documentation in line with client practices and compliance requirements
• Support development of processes and procedures to strengthen the security posture and achieve & maintain compliance
• Review and ensure that all cloud environments adhere to compliance requirements. (encryption, access levels, password settings, etc.)
• Translate security and technical requirements into business requirements and communicate security risks to different audiences ranging from business leaders to engineers
• Evaluating, architecting and implementing security-focused tools and services
• Identify risks and provide guidance regarding remediation of gaps
• Manage and track certification/audit work for SOC2, ISO
• Respond to client intake requests related to data privacy and security