Staff Security Engineer (Compliance)

Quick Facts

• Role: IC Tech Lead, Staff Security Engineer (Compliance)

• Focus: Automating security compliance as code with continuous evidence collection and control monitoring

• Language requirement: Japanese (read, write, speak)

Description

Security compliance is currently mostly manual (screenshots, spreadsheets, and evidence pulled together before an audit). This role builds automation so evidence collection and control monitoring happen continuously, enabling audits to be passed because the system is always current. You’ll treat compliance as code and focus on getting controls right—not just checking them.

Responsibilities

• Build and own automated evidence collection pipelines integrating with cloud infrastructure, identity providers, source control, ticketing systems, and other security tooling

• Design and implement continuous control monitoring to measure compliance in real time

• Replace legacy manual, paper-driven compliance processes with engineering-first automated systems

• Own the technical strategy for future certifications and regulatory frameworks, evaluating new requirements and designing scalable solutions

• Use AI where it fits: apply LLMs and agents to map controls to evidence, validate it, and flag drift

• Spearhead international compliance initiatives such as ISMAP, IRAP, and C5

• Lead technical engagements with external auditors and help ensure any findings are remediated

• Create and transform compliance documentation such as policies and procedures

Requirements

• 8+ years of experience in software engineering and/or information security with a focus on security compliance and risk management

• Japanese fluency (reading, writing, and speaking)

• Bachelor’s degree in Computer Science, IT, Cybersecurity, or related field (advanced degrees or certifications like CISM, CISSP, CISA preferred)

• Experience developing and implementing security policies and compliance frameworks (ISMAP, IRAP, C5, FedRAMP, ISO 27001, ISO 42001, NIST, GDPR, SOC 2 Type 2)

• Knowledge of security principles, controls, and security technologies/products

• Familiarity with cloud security practices and compliance standards (AWS, Azure, GCP)

• Expertise with AWS services

• Exceptional written and presentation communication skills for stakeholder engagement

• Skills in identifying security risks, implementing mitigation strategies, and driving remediation end-to-end

• Experience navigating international and domestic security regulations

Benefits

• Base pay range: $176,100–$308,200, plus equity when applicable and variable/incentive compensation

• Health plans, including flexible spending accounts

• 401(k) with company match

• ESPP

• Matching donations

• Flexible time away plan and family leave programs