Staff Security Engineer (Compliance

Role Overview

As a Staff Security Engineer (Compliance) at Moveworks, you will be responsible for building and owning automated evidence collection pipelines, designing and implementing continuous control monitoring, and challenging the status quo of compliance. You will work with a team to extend agentic AI to every employee across every corner of the business. You will be at the forefront of the AI transformation, backed by the global scale of Service Now and the agility of a high-growth company.

You will build and own automated evidence collection pipelines that integrate with cloud infrastructure, identity providers, source control, ticketing systems, and other security tooling. You will design and implement continuous control monitoring, ensuring compliance is measured in real time rather than only during audit periods. You will challenge the status quo of compliance, replacing manual, paper-driven processes with software and engineering-first systems.

To be successful in this role, you will have 8+ years of experience in information security roles, with a specific focus on security compliance and risk management. You will have a bias to remove manual work and a demonstrated experience in developing, managing, and implementing security policies and compliance frameworks such as ISO 27001, ISO 42001, NIST, GDPR, and SOC 2 Type 2.

• US Citizenship required
• 8+ years of experience in information security roles, with a specific focus on security compliance and risk management
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field
• Advanced degrees or certifications (e.g., CISM, CISSP, CISA) are preferred
• A bias to remove manual work
• Demonstrated experience in developing, managing, and implementing security policies and compliance frameworks such as ISO 27001, ISO 42001, NIST, GDPR, and SOC 2 Type 2
• Knowledge of security principles, controls, and technologies/products
• Familiarity with cloud security practices and cloud provider compliance standards (AWS, Azure, GCP)
• Expertise with AWS services
• Exceptional communication, written, and presentation skills capable of engaging a wide range of stakeholders
• Skills in identifying security risks, implementing mitigation strategies, and driving remediation end-to-end
• Experience with navigating international and domestic security regulations

• Competitive salary
• Equity
• Healthcare PTO
• Retirement plan
• Learning budget
• Parental leave
• Wellness program
• Visa/relocation assistance
• Remote flexibility
• Stipends
• Bonus/commission
• Paid holidays