Cyber Security Engineer (Compliance, Cloud Security & IT Security)

We’re hiring a hands-on Cyber Security Engineer to own and elevate the security posture of our organization end-to-end. You will lead our SOC2 compliance program, run Cloud Security Posture Management (CSPM) across our cloud footprint, and harden our day-to-day IT and SaaS environment — with Google Workspace as a critical control plane. This is a high-ownership role: you’ll set the standards, build the tooling, run the audits, and partner with engineering, IT, and leadership to make security a continuous practice rather than a one-time project. Responsibilities 1. Compliance & Risk Management SOC2 Program Ownership: Drive end-to-end SOC2 Type 2 readiness, evidence collection, control mapping, and audit execution. Maintain continuous compliance between audit cycles. Framework Expansion: Build a flexible compliance framework that scales to GDPR, ISO 27001, HIPAA, and other regulatory regimes as the business grows. Risk Assessments: Run regular risk assessments, vendor security reviews, and third-party due diligence. Maintain the risk register and remediation roadmap. Policy & Documentation: Author and maintain security policies, standards, incident response plans, BCP/DR plans, and employee security awareness training. 2. Cloud Security & CSPM CSPM Operations: Own and operate CSPM tooling (e.g., Wiz, Prisma Cloud, Orca, or equivalent) across GCP and any other cloud environments. Triage findings, drive remediation SLAs, and tune policies. Vulnerability Management: Build and run organization-wide VM workflows across cloud infrastructure, data stores (GCP, MongoDB, Redis, etc.), containers, and endpoints. IAM & Secrets: Enforce least-privilege IAM, service account hygiene, key rotation, and secrets management across cloud and SaaS systems. Infrastructure Hardening: Partner with platform engineering to embed security guardrails into IaC, CI/CD pipelines, and Kubernetes workloads. 3. Google Workspace & SaaS Security Workspace Admin Security: Serve as the security owner for