Senior Security Engineer, Global Risk, Privacy and Compliance
New York, NY, USA +4 · Senior · Full-time · Posted Oct 19, 2026
- Location
- New York, NY, USA
Kirkland, WA, USA
Raleigh, NC, USA
Durham, NC, USA
Seattle, WA, USA - Experience
- 5 years in security assessments, design reviews, or threat modeling; 5 years in security engineering, computer and network security, and security protocols; 5 years coding; 1 year in technical leadership or enterprise technical risk analysis.
- Education
- Bachelor's degree or equivalent practical experience.
About the job
Leads security controls engineering and assurance for Google Cloud by assessing risks, implementing automated controls, and reporting control performance and coverage.
What you'll do
- Lead multi-quarter initiatives to establish Comply as an authoritative controls catalog aligned with ESF (NIST 800-53).
- Conduct security risk assessments, design reviews, and threat modeling; translate regulatory standards into technical controls and automate control reporting, including with AI.
- Define Key Control Indicators, lead remediation and root-cause analysis, and provide technical direction and mentorship.
What they ask for
- Bachelor's degree or equivalent practical experience.
- 5 years of experience with security assessments, security design reviews, or threat modeling; and 5 years with security engineering, computer and network security, and security protocols.
- 5 years of coding experience in one or more general purpose languages.
- 1 year leading teams in a technical capacity or leading enterprise technical risk analysis; experience interpreting and implementing controls mapped to industry frameworks and regulatory standards.
Nice to have
- Experience defining and measuring Key Control Indicators and consolidating controls against centralized frameworks.
- Familiarity with AI-driven tooling for control language harmonization, policy alignment, or security reporting; scripting or software development skills such as Python, Go, or SQL.
Pay
US: $174000 - $252000 (USD) base salary
Tools
ESF (NIST 800-53), ISO 27001, SOC 2, NIST, GDPR, Python, Go, SQL
AI focus
Use AI to streamline language and reduce catalog complexity; preferred experience includes AI-driven automation for control language harmonization, policy alignment, or security reporting.
Model-written summary · the original posting is authoritative