Staff Security Engineer (Compliance) – Moveworks

Stack

Responsibilities

• ▹Build and own automated evidence collection pipelines that integrate with cloud infrastructure, identity providers, source control, ticketing systems and other security tooling
• ▹Design and implement continuous control monitoring so compliance is measured in real time rather than only during audit periods
• ▹Replace manual, paper-driven processes with software and engineering-first systems
• ▹Own the technical strategy for future certifications and regulatory frameworks, evaluating new requirements and designing scalable solutions
• ▹Use LLMs and agents where they fit: map controls to evidence, validate it and flag drift
• ▹Lead compliance initiatives such as ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, SOC 2 Type 2, CSA STAR Level 2, NIST 800-171 and GDPR
• ▹Manage auditor relationships and ensure smooth, compliant audits
• ▹Partner with key stakeholders to ensure controls are effectively implemented and findings are remediated
• ▹Create and transform documentation such as policies, procedures and other compliance material

Requirements

• ▹US citizenship
• ▹8+ years of experience in information security roles, with a focus on security compliance and risk management
• ▹Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related field; advanced degrees or certifications (e.g., CISM, CISSP, CISA) are preferred
• ▹A bias to remove manual work: you automate recurring manual tasks
• ▹Demonstrated experience developing, managing and implementing security policies and compliance frameworks such as ISO 27001, ISO 42001, NIST, GDPR and SOC 2 Type 2
• ▹Knowledge of security principles, controls and technologies/products
• ▹Familiarity with cloud security practices and cloud provider compliance standards (AWS, Azure, GCP)
• ▹Expertise with AWS services
• ▹Exceptional communication, written and presentation skills for engaging a wide range of stakeholders
• ▹Skills in identifying security risks, implementing mitigation strategies and driving remediation end-to-end
• ▹Experience navigating international and domestic security regulations

Soft skills

What we offer

• ▹Flexible, trust-based way of working: work personas (flexible, remote or office-based) are assigned depending on the nature of the work and the work location

About the company

Moveworks is an agentic AI assistant platform that lets employees talk to their business systems in natural language. It was acquired by ServiceNow in December 2025.