Information Systems Engineer - Compliance

The IT Compliance Engineer is responsible for driving the organization’s products and services to comply with applicable regulatory, contractual, and industry requirements. This role supports internal audit activities, drives compliance programs across product teams, and partners with cross‑functional stakeholders to reduce compliance risk, maintain certifications, and strengthen customer trust.

May consider additional Broadcom Locations for the right candidate.

• Support the development, implementation, and maintenance of compliance programs and frameworks for products and services, including contributing to policies, standards, and control requirements.

• Monitor changes in regulatory, security, and privacy requirements (e.g., SOC 1/SOC 2, ISO 27001/27017/27018, HIPAA, PCI) and assess their impact on product offerings.

• Coordinate readiness activities to support compliance with external audits and customer assessments.

• Lead or support internal and external audits related to product and service operations.

• Conduct control testing, evidence collection, walkthroughs, and remediation validation.

• Prepare audit deliverables, respond to auditor inquiries, and ensure timely closure of audit findings.

• Independently manage and prioritize multiple security compliance projects, providing regular updates and data presentations to stakeholders.

• Organize, lead and facilitate cross‑functional project teams.

• Technical or business consulting resource to business level managers and control owners.

• Develop metrics that provide data for process measurement, identifying indicators for future improvement opportunities.

• Partner with Product, Engineering, Security, Legal, Risk, and Operations teams to ensure compliance is embedded throughout the product lifecycle.

• Support product launches by evaluating compliance requirements and identifying control gaps.

• Provide guidance to teams on developing compliant processes and documentation.

• Identify compliance risks across products and services and drive remediation plans.

• Maintain risk registers, track mitigation progress, and report status to leadership.

• Support root‑cause analysis for compliance failures and propose long‑term corrective actions.

• Assist with customer due‑diligence questionnaires, RFPs, and contract compliance inquiries.

• Create and maintain compliance documentation such as control matrices, audit reports, FAQs, and standard responses.

• Present compliance posture and audit outcomes to internal leadership and external customers.

• Bachelor’s degree in Information Security, Business, Audit, Risk Management, or related field.

• 8+ years of experience in compliance, audit, risk management, or product governance.

• Strong understanding of security, privacy, and compliance frameworks (SOC, ISO, NIST, etc.).

• Proven experience project managing security compliance audit or certification projects.

• Ability to quickly grasp complex technical concepts and make them easily understandable.

• Experience supporting or conducting audits (internal, external, or customer audits).

• Excellent analytical, documentation, and communication skills.

• Ability to work cross‑functionally and manage multiple projects simultaneously.

• Professional certifications (e.g., CISA, CISSP, CRISC, CIPP, ISO Lead Auditor).

• Experience in SaaS or cloud‑based product environments.

• Technical familiarity with cloud platforms, Dev Ops, and security controls.

• Experience with GRC tools (e.g., Archer, Service Now GRC, One Trust).

• Will champion significant projects, programs, and business initiatives using demonstrated creativity and ingenuity.

• Strong problem‑solving and risk analysis.

• Ability to interpret regulations and translate into actionable requirements.

• Project management and organizational skills.

• Leads major projects.

• Consults with management on long‑range goals.

• Escalation point for complex issues.

• High attention to detail with ability to meet deadlines.

• Collaborative mindset with the ability to influence without authority.

• Self‑starter…