Senior Security Compliance Engineer

Responsibilities

• Design, develop, and maintain automated compliance workflows using scripting, APIs, and GRC tooling
• Build and improve continuous control monitoring capabilities for real-time visibility into compliance posture
• Partner with Security Risk teams to streamline compliance-to-risk operations
• Implement and customize compliance automation platforms like Drata, Vanta, or Anecdotes
• Serve as a trusted advisor to Engineering and Product teams to embed compliance-by-design
• Identify opportunities to use AI and automation to eliminate toil and scale programs

Requirements

• 3–5 years of experience in security compliance, GRC engineering, or security engineering
• Understanding of cloud-native web application architectures (AWS, Kubernetes)
• Experience implementing Compliance Automation platforms (Drata, Vanta, Anecdotes, etc.)
• Hands-on experience with SOC 2, ISO 27001, ISO 27017, PCI, and/or SOX ITGCs
• Proficiency in Python, Go, or SQL
• Experience building automation for compliance workflows and integrating REST APIs

Preferred Qualifications

• Experience implementing Identity Governance tools (UARs, JITA)
• Background in security operations, security engineering, or security architecture
• Experience with ISO 27018, HIPAA, GDPR, CCPA, or NIS2

About the Company

Klaviyo is an AI-first B2C CRM platform that empowers over 176,000 brands in 80+ countries to cultivate relationships with hundreds of millions of consumers.