Principal Security Compliance Specialist

Akamai•Cambridge, MA

6d•$132,100 - $237,900•Hybrid

About The Position

Join our global InfoSec Security Compliance Team! Our Team is central to Akamai's commitment to monitor, understand and communicate about the evolving cyber-threat space. We are a team of security researchers, architects, analysts and subject matter experts. We translate compliance requirements into technically verifiable and architecturally sound controls that provide clear guidance, technical roadmaps, and executive explanations. Partner with the best You will be responsible for strategically driving and executing security compliance initiatives across our global enterprise portfolio. You will oversee compliance strategy and execution across any regulatory, industry, customer-driven, or defense framework. You will interpret complex requirements, design scalable control frameworks, and lead end-to-end audit initiatives by partnering with cross-functional teams.

Requirements

10+ years relevant experience and BA/BS or Graduate Degree
Demonstrate success with security compliance programs across many frameworks. (DoD SRG IL4/IL5/IL6, CMMC, NIST SP 800-171/53, FedRAMP, SOC 1/2/3, ISO/IEC 27001, PCI-DSS, or GovRAMP).
Show prior experience working directly within a Cloud Service Provider environment or consultant/assessor with a Third-Party Assessment Organization.
Have a proven track record of interfacing with senior executive leadership, government/defense stakeholders, and translating compliance demands into strategic business enablers.
Have CISSP, CISA, CISM, CCSP, CCA/CCP (CMMC Assessor/Professional), ISO 27001 Lead Auditor, or equivalent credentials.

Responsibilities

Architecting and implementing adaptable, unified control frameworks that allow engineering and product teams to satisfy commercial, federal, and DoD authorization requirements.
Collaborating with security architects, software engineers, and system owners to design, test, and maintain technically verifiable controls mapped to diverse federal, defense, and international standards.
Serving as primary technical interface for 3PAOs, C3PAOs, external audit bodies, and defense agencies.
Managing end-to-end assessment lifecycles, evidence gathering, and finding remediations.
Synthesizing complex compliance gaps, audit findings, and regulatory shifts into actionable risk models, written reports, and strategic briefings.
Driving ongoing continuous monitoring and recurring audit workflows to ensure perpetual readiness across all existing and upcoming lifecycles.