Position: Senior Compliance Engineer
Company: Zoolatech
Category: Business Analyst
Experience required: 3y
English level: fluent

Project Description
What if you could use your engineering skills to develop a solution that impacts the way communities hospitals, homes, sports stadiums, and schools across the world are built? Construction impacts the lives of nearly everyone in the world, and yet it’s also one of the world's least digitized industries, not to mention one of the most dangerous. That’s why we're looking for a talented Senior Compliance Engineer to join the journey with our client Procore. As a Compliance Engineer, you’ll be a key member of the GRC team, within our Security Engineering Department. You’ll partner cross-functionally with our Platform, Applications, Infrastructure, IT Security, Compliance, Product, Legal, and Internal Audit teams to develop and maintain compliance with existing control standards, as well as pursue new ones.

Responsibilities
Maintain a risk & control matrix for Product & Technology
Facilitate audits for any existing or future control standard that Procore currently holds or plans to pursue
Collect and manage audit evidence
Understand the control stack, including mitigating controls
Keep up with changing standards and evaluate any necessary updates to our control set
Analyze overlap between control standards to estimate level of effort necessary to achieve certification against a new standard
Keep data in the GRC platform current and relevant
Work closely with IT Compliance, Internal Audit, Legal, and Product to develop, maintain, and improve our compliance posture

Skills Required
Bachelor’s degree in Engineering, Information Systems, Business or related disciplines.
2+ years of experience in consulting, preferably at a Big 4 audit firm
3+ years as a technical compliance specialist, preferably a late-stage startup
Expert technical writer. Familiarity with CMS platforms, Confluence, JIRA, diagramming (Viso or LucidChart), indexing for search, surveys, and usage metrics
Strong collaboration skills
Ability to strike the right balance between technical controls and keeping it lightweight
Demonstrated ability to manage multiple projects and priorities
Passion for developing great people, not just great products
Creative, business-first approach to GRC
Experience in Security and Compliance standards likeISO 27001, SOC, NIST, etc.
Experience with any of the GRC tools is preferred