Senior Compliance Engineer (offline)

Project Description
What if you could use your engineering skills to develop a solution that impacts the way communities hospitals, homes, sports stadiums, and schools across the world are built? Construction impacts the lives of nearly everyone in the world, and yet it’s also one of the world's least digitized industries, not to mention one of the most dangerous. That’s why we're looking for a talented Senior Compliance Engineer to join the journey with our client Procore. As a Compliance Engineer, you’ll be a key member of the GRC team, within our Security Engineering Department. You’ll partner cross-functionally with our Platform, Applications, Infrastructure, IT Security, Compliance, Product, Legal, and Internal Audit teams to develop and maintain compliance with existing control standards, as well as pursue new ones.

Responsibilities
Maintain a risk & control matrix for Product & Technology
Facilitate audits for any existing or future control standard that Procore currently holds or plans to pursue
Collect and manage audit evidence
Understand the control stack, including mitigating controls
Keep up with changing standards and evaluate any necessary updates to our control set
Analyze overlap between control standards to estimate level of effort necessary to achieve certification against a new standard
Keep data in the GRC platform current and relevant
Work closely with IT Compliance, Internal Audit, Legal, and Product to develop, maintain, and improve our compliance posture

Skills Required
Bachelor’s degree in Engineering, Information Systems, Business or related disciplines.
2+ years of experience in consulting, preferably at a Big 4 audit firm
3+ years as a technical compliance specialist, preferably a late-stage startup
Expert technical writer. Familiarity with CMS platforms, Confluence, JIRA, diagramming (Viso or LucidChart), indexing for search, surveys, and usage metrics
Strong collaboration skills
Ability to strike the right balance between technical controls and keeping it lightweight
Demonstrated ability to manage multiple projects and priorities
Passion for developing great people, not just great products
Creative, business-first approach to GRC
Experience in Security and Compliance standards likeISO 27001, SOC, NIST, etc.
Experience with any of the GRC tools is preferred

About Zoolatech

Zoolatech is a boutique service provider, specializing in high-end software development. We are based in Silicon Valley with a Development Center in Kyiv, Ukraine. Although ZoolaTech is a relatively young player on the Eastern European market, we have deep roots and years of experience of working within Ukrainian and American high tech industries. The size of our clientele varies from Fortune 500 to inspiring startups. We are not an outsourcer in a traditional sense, rather we specialize in helping our Clients scale by extending their teams to Eastern Europe.

Over the years, we have learned that in our industry people are the most important asset, and so we treat our employees as such. We set our working environment in a way that allows individuals thrive and grow professionally, as well as personally. As much as we are dedicated to providing the best possible services to our Clients, we are just as dedicated to helping our Employees reach their professional dreams and ambitions.

Company website:
https://zoolatech.com/