Cyber Security Engineer

V2

Soft is a global leader in IT services and business solutions, delivering innovative and cost-effective technology solutions worldwide since 1998. We have headquartered in Bloomfield Hills, MI and have 16 offices spread across six countries. We partner with Fortune 500 companies to address complex business challenges. Our services span AI, IT staffing, cloud computing, engineering, mobility, testing, and more. Certified with CMMI Level 3 and ISO standards, V2

Soft is committed to quality and security. Beyond our work, we actively support local communities and non-profits, reflecting our core values. Join us to be part of a dynamic and impactful global company!

This role is primarily responsible for supporting the organization's government compliance program, ensuring adherence to regulatory requirements and maintaining alignment with mandated cybersecurity and IT compliance frameworks. In support of this mission, the position also contributes to broader Information Security Compliance efforts by executing special projects driven by evolving regulatory and cybersecurity requirements, processing and responding to third-party risk management questionnaires, developing and maintaining documentation of processes and procedures to support audit readiness and operational consistency, and assisting with additional Information Security Compliance activities as needed to strengthen the organization's overall compliance posture.

• Demonstrated experience in Information Technology audit, with the ability to identify, evaluate, and validate control evidence sufficient to support and demonstrate compliance with regulatory and industry requirements.
• Deep understanding of NIST SP 800-171 or comparable control frameworks (e.g., NIST SP 800-53, NIST Cybersecurity Framework, ISO/IEC 27001/27002, FedRAMP, PCI DSS, or CIS Critical Security Controls), with the ability to rapidly apply control-based concepts across regulatory environments.
• Ability to research and interpret new regulatory requirements, providing concise summaries to senior leadership
• Strong written and verbal communication skills across multiple channels and organizational levels
• Self-starter with the ability to work independently and deliver clear, actionable results
• Demonstrated passion for learning and applying government compliance standards
• Skilled in drafting and interpreting policies and procedures
• Proficient in identifying, implementing, and managing security controls
• Knowledgeable in collecting and interpreting evidence and artifacts for audits and assessments
• Solid grasp of IT domains including information security, network architecture, and cloud computing
• Prior experience in Governance, Risk & Compliance (GRC) organization or comparable role

• Pxperience with U.S. Government IT compliance requirements
• Experience developing and maintaining System Security Plans (SSPs)
• Project management experience and ability to drive action across functional areas
• Foundational understanding of emerging AI tools and technologies, with the ability to evaluate their application for enhancing productivity and automation while identifying associated risks, potential misuse, and impacts to the organization's security and compliance posture

• Certified Information Systems Security Professional (CISSP)
• Certified in Risk and Information Systems Control (CRISC)

V2

Soft is an Equal Opportunity Employer ( EOE). We welcome applicants from all backgrounds, including individuals with disabilities and veterans.