This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The Koddi Engineering team is seeking an experienced Senior Risk and Compliance Engineer to join our fast-paced, highly productive infrastructure team. We operate in a high-speed, data-driven environment, where security, compliance, and risk management are critical to our success. As we expand, we are looking for this pivotal role to lead and manage our compliance efforts end-to-end.
Job Responsibility:
Lead risk, compliance, and audit readiness efforts across our AWS- and Azure-based infrastructure
Define, maintain, and streamline compliance frameworks, security controls, and risk management processes
Automate and integrate evidence collection using AWS/Azure CLI, bash/zsh, and/or Python
Collaborate with engineering, security, legal, and leadership teams to embed compliance into systems and processes
Manage internal audits, risk assessments, and external certification processes with third-party assessors
Act as a bridge between engineering, leadership, and auditors to ensure smooth communication and successful outcomes
Document and improve compliance processes to reduce engineering overhead and ensure year-round readiness
Requirements:
Bachelor's degree or equivalent experience
5+ years of technology compliance experience in cloud environments (AWS/Azure)
Strong knowledge of compliance frameworks and regulations (SOC 1/2, GDPR, CCPA, etc.)
Hands-on experience with security controls in AWS/Azure (IAM, encryption, logging, monitoring)
Ability to script and automate evidence collection using AWS/Azure CLI, bash/zsh, and/or Python (not developer level, but capable of technical setup and automation)
Background in security architecture, risk assessment, and compliance reviews
Strong project management, communication, and organizational skills
Nice to have:
Relevant certifications (CISSP, CISA, or similar) a plus