Staff Security Engineer (Compliance) - Moveworks

ServiceNow • Mountain View, CA

3d

About The Position

Moveworks is seeking an AI-native, hands-on individual-contributor tech lead to modernize security compliance through software engineering and automation. The role will replace manual, periodic audit preparation with systems that continuously collect evidence and validate controls, keeping compliance current and audit-ready throughout the year. The engineer will own the software engineering behind compliance certifications, define technical strategy for future certifications and regulatory frameworks, and lead technical engagements with external auditors for international certifications and regulations such as ISMAP, IRAP, and C5. The position applies AI, including LLMs and agents, where useful across the compliance lifecycle, including control-to-evidence mapping, evidence validation, drift detection, documentation, and audit processes. It also partners with stakeholders to implement controls and remediate findings, and creates or updates compliance policies, procedures, and other written materials. The position requires fluency in Japanese and expertise with AWS.

Requirements

• At least 8 years of experience in software engineering or information security roles, with a specific focus on security compliance and risk management.
• Fluency in Japanese, including reading, writing, and speaking.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Demonstrated experience developing, managing, and implementing security policies and compliance frameworks, such as ISMAP, IRAP, C5, FedRAMP, ISO 27001, ISO 42001, NIST, GDPR, and SOC 2 Type 2.
• Knowledge of security principles, controls, and technologies or products.
• Familiarity with cloud security practices and cloud provider compliance standards for AWS, Azure, and GCP.
• Expertise with AWS services.
• Exceptional written, verbal, and presentation skills, including the ability to engage a wide range of stakeholders.
• Ability to identify security risks, implement mitigation strategies, and drive remediation end to end.
• Experience navigating international and domestic security regulations.

Nice To Haves

• An advanced degree or certifications such as CISM, CISSP, or CISA.
• A bias toward eliminating manual work by automating recurring tasks.

Responsibilities

• Build and own automated evidence-collection pipelines integrating cloud infrastructure, identity providers, source control, ticketing systems, and other security tooling.
• Design and implement continuous control monitoring so compliance is measured in real time.
• Replace manual, paper-driven compliance processes with software-based, engineering-first systems.
• Own the technical strategy for future certifications and regulatory frameworks by evaluating requirements and designing scalable solutions with low operational overhead.
• Apply LLMs and agents where appropriate to map controls to evidence, validate evidence, and flag compliance drift.
• Lead international compliance initiatives, including ISMAP, IRAP, and C5.
• Manage relationships and technical engagements with external auditors to support smooth, compliant audits.
• Partner with stakeholders to implement compliance controls and drive remediation of findings.
• Create and transform compliance documentation, including policies and procedures.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior