Senior Security Compliance Engineer, Apple Services Engineering (ASE)

Apple • Austin, TX

14h

About The Position

We are the Apple Services Engineering (ASE) Security and Privacy Compliance organization. Our team is responsible for assessing areas like iCloud, Cloud infrastructure and Media products. Our team upholds Apple’s high security standards which enable us to securely grow our products, services and infrastructure. We are expanding our team and looking for a Senior Security Compliance Engineer who will be responsible for building and growing a global cloud services governance, risk management and compliance program.

In this role, you will ensure we meet our legal, regulatory, and third party compliance obligations while safeguarding the systems that millions of our users rely on every day. You will collaborate with engineering leaders at many levels, developers, quality engineers, compliance and security teams across Apple to institute the controls vital for the program. You will partner with application security, platform security, SRE, central security and compliance groups at Apple to implement controls and processes and conduct gap assessments across ASE. You will be responsible for supporting dozens of key, ongoing compliance projects including preparation of regulatory materials, management of documentation, creation of presentations, and coordination of cross-functional activity. You will need to be a SOX subject matter expert with sound technical experience and the ability to comfortably deliver executive briefings on our internal control environment. If you are someone who works well in collaborative environments and has a demonstrated track record of building and maintaining high performing compliance programs, we want to talk with you!

Requirements

• Experience leading and managing SOX programs at scale, preferably in Big 4 or large enterprise environments 10+ years of experience evaluating product and infrastructure security risks, and providing strategic recommendations for effective mitigation
• 10+ years of security compliance framework experience
• Expertise with security standards such as SOX, PCI-DSS, ISO27K, SOC 1/2 or NIST (some combination of these is ideal)
• Understanding of one or more of the following technologies/focus areas are ideal - cloud, open sourced distributed systems, security
• Bachelor's Degree or equivalent experience

Nice To Haves

• Current CPA. CISA, CISSP, CISM, CIPT or other related certifications
• Experience with standards research and contributing to policy reform
• Experience with light scripting preferred
• Demonstrated track record of dealing with ambiguity and complexity in achieving and sustaining compliance across technologies at scale

Responsibilities

• building and growing a global cloud services governance, risk management and compliance program
• ensure we meet our legal, regulatory, and third party compliance obligations while safeguarding the systems that millions of our users rely on every day
• collaborate with engineering leaders at many levels, developers, quality engineers, compliance and security teams across Apple to institute the controls vital for the program
• partner with application security, platform security, SRE, central security and compliance groups at Apple to implement controls and processes and conduct gap assessments across ASE
• responsible for supporting dozens of key, ongoing compliance projects including preparation of regulatory materials, management of documentation, creation of presentations, and coordination of cross-functional activity
• deliver executive briefings on our internal control environment

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Number of Employees: 5,001-10,000 employees