Description
Splunk, a part of Cisco, is looking for a Security Governance & Compliance Specialist to join its Tech Compliance team in San Jose, Costa Rica.
The role involves leading security and compliance programs, building partnerships with product owners, engineering, and security teams to drive risk mitigation and controls management across commercial frameworks and cloud environments.
Your Impact
As a Security Governance & Compliance Specialist, you will bridge security policy and engineering execution, lead and support commercial security compliance programs, strengthen audit readiness, and build automation to improve the quality, speed, and scalability of evidence collection and compliance operations.
You will partner with various teams, including product, engineering, DevOps, and security, to translate sophisticated compliance directives into practical implementation guidance, integrate controls into engineering workflows, and help maintain a continuous compliance posture across Splunk's cloud environments.
Key Responsibilities
- Plan and execute security and technology audits from planning through to certification or report delivery.
- Serve as the main contact for internal and external auditors for assigned commercial compliance programs.
- Conduct gap assessments and audit readiness reviews for products, services, and new regulatory requirements.
- Translate compliance requirements into clear, actionable guidance for engineering, product, and operational teams.
- Partner with DevOps and Engineering to incorporate compliance controls, validation, and evidence generation into CI/CD and operational workflows.
- Design, build, and run automated solutions for collecting and validating audit evidence.
- Support continuous monitoring activities to maintain compliance posture between audit cycles.
- Help define, implement, and monitor controls for enterprise AI tools and AI/ML systems.
Minimum Qualifications
- Bachelor's degree plus 5+ years of experience in technical compliance, security, risk, audit, or a related field.
- Direct experience supporting or leading audit or certification programs.
- Experience building and implementing automation for evidence collection, compliance testing, control validation, or compliance reporting.
- Solid understanding of security controls and governance in cloud-hosted environments.
- Engineering fluency, including experience with scripting or automation tools such as Python, Go, Terraform, CloudFormation, or similar technologies.
- Strong written and verbal communication skills.
Preferred Qualifications
- Experience with ISO/IEC 42001, AI governance concepts, and emerging AI risk-management frameworks.
- Familiarity with CSA STAR, PCI DSS, and commercial privacy or customer-assurance programs.
- Experience integrating compliance controls and evidence generation into CI/CD pipelines or infrastructure-as-code workflows.
- Proven program-management skills.
- Relevant certifications such as CISA, CISSP, CISM, CRISC, or cloud security certifications.
Benefits
No benefits information provided.