Compliance Information Security Engineer

Overview

The application window is expected to close on: 01/30/2026. Job posting may be removed earlier if the position is filled or if a sufficient number of applications are received.

The Cloud Assurance, Readiness & Compliance (Cloud

ARC) team within STO ensures Cisco’s cloud offering portfolio demonstrates the highest levels of security assurance to our global customers while maintaining cybersecurity compliance and certifications required to access markets around the world. Our team collaborates with customers, Sales, Engineering, Supply Chain, Government Affairs and Legal to build trust and transparency through security and compliance.

The Compliance Information Security Engineer will help attain and maintain compliance certifications for Cisco cloud offerings globally, supporting frameworks such as SOC2, ISO
27001/17/18, ENS, C5, etc. This role facilitates compliance readiness, control assessments and external audits in collaboration with Cloud

ARC leadership, Product Management, and Engineering. It also provides compliance readiness support and supports data privacy, security, and cloud compliance initiatives.

The ideal candidate is excited about compliance as a business enabler, with hands-on experience across multiple compliance and regulatory frameworks (e.g., SOC2, ISO
27001/17/18, CSA STAR, Spain ENS, Germany C5, Japan ISMAP, Australia IRAP) and has proven experience assessing complex product ecosystems against cloud control frameworks. This role suits a strategic problem solver who can communicate technical requirements to stakeholders and is eager to advance customer trust.

• Support security compliance and regulatory audits in Cisco’s cloud compliance portfolio.
• Collaborate with a team of compliance engineers to develop and execute common control strategies, ensuring consistency across audits.
• Partner with Cisco Business Units (BUs) to support adoption and compliance with Common Cloud Controls.
• Serve as a subject matter expert for relevant security compliance frameworks, providing guidance to product and engineering teams.
• Conduct information security assessments over a portfolio of products and prepare reports summarizing compliance results and remediation plans.
• Work with Cloud
  
  ARC leaders and Product Management to develop and maintain the Product Compliance roadmaps for Cisco Cloud offerings.
• Support initiatives related to data privacy, security, and cloud compliance requirements.

• 2+ years of experience in a security or compliance role.
• Bachelor’s degree in Information Security, Computer Science, or a related field.
• Hands-on experience with cloud platforms, particularly AWS or other major cloud environments.
• Deep expertise in regulatory compliance and security frameworks such as ISO 27001/17/18, SOC2, C5, ENS, and similar standards.
• Strong understanding of IT security processes and services, including Secure SDLC, Identity and Access Management (IAM), Vulnerability Management, and Backup/Disaster Recovery.

• Industry certifications such as CISA
  , CISSP
  , CCSK
  , or equivalent certifications.
• Master’s degree in Information Security, Computer Science, or related field.
• Consistent track record in delivering compliance reports and certifications.
• Experience partnering with auditors to attain and maintain compliance certifications.
• Excellent communication skills, with the ability to collaborate across technical and non-technical teams.
• Highly organized and adaptable, with success leading multiple priorities in a fast-paced environment.
• Team-oriented mindset with collaboration and continuous improvement.

At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds, providing customers with security, visibility, and insights across the digital footprint.

We work as a team, collaborating with empathy to make big things happen on a global scale. We are Cisco, and our power starts with you.