Description
The Information Security Engineer will play a critical role in maintaining compliance certifications for Cisco Cloud offerings across the globe, and supporting compliance and regulatory frameworks such as SOC2, ISO27001/17/18, ENS, C5, etc.
The ideal candidate is enthused by the idea of compliance as a business enabler, has hands-on experience with multiple compliance and regulatory frameworks, and has strong experience assessing complex product ecosystems against cloud control frameworks.
Key Responsibilities:
- Support security compliance and regulatory audits in Cisco’s cloud compliance portfolio.
- Collaborate with a team of compliance engineers to develop and execute common control strategies, ensuring consistency across audits.
- Partner with Cisco Business Units (BUs) to support the adoption and compliance with Common Cloud Controls.
- Serve as a subject matter expert for relevant security compliance frameworks, providing guidance and expertise to product and engineering teams.
- Conduct information security assessments over a portfolio of products and prepare reports summarizing compliance results and remediation plans.
- Work with CloudARC leaders and Product Management to develop and maintain the Product Compliance roadmaps for Cisco Cloud offerings.
- Support initiatives related to data privacy, security, and cloud compliance requirements.
Required Skills:
- 2+ years of experience in a security or compliance role.
- Bachelor’s degree in Information Security, Computer Science, or a related field.
- Hands-on experience working with cloud platforms, particularly AWS or other major cloud environments.
- Proven track record in supporting delivery of compliance reports and certifications.
- Deep expertise in regulatory compliance and security frameworks such as ISO 27001/17/18, SOC2, C5, ENS, and similar standards.
- Strong understanding of key IT security processes and services, including Secure SDLC, Identity and Access Management (IAM), Vulnerability Management, and Backup/Disaster Recovery.
- Experience partnering with auditors to drive attainment and maintenance of compliance certifications.
- Excellent communication skills, with the ability to collaborate effectively across technical and non-technical teams.
- Highly organized and adaptable, with demonstrated success managing multiple priorities in a fast-paced, evolving environment.
- Team-oriented mindset, with a commitment to collaboration, knowledge sharing, and continuous improvement.