Staff Security Engineer (Compliance) - Moveworks

ServiceNow • Mountain View, CA

1d

About The Position

Moveworks, now part of ServiceNow, is seeking a hands-on Staff Security Engineer to lead the engineering behind its security compliance certifications. This individual-contributor technical lead will replace manual, periodic compliance processes with automated platforms that continuously collect evidence and validate controls, keeping the organization audit-ready year-round. The role applies an engineering-first approach to compliance, with AI used where appropriate across software development, evidence collection, control validation, documentation, and audit workflows.

The engineer will own technical strategy for future certifications and regulatory frameworks, lead technical engagements with external auditors, and spearhead international compliance initiatives such as ISMAP, IRAP, and C5. They will partner with stakeholders to implement controls and remediate findings, while creating and transforming policies, procedures, and other compliance documentation. The posting describes ServiceNow’s distributed-work personas as flexible, remote, or required in office, assigned according to the nature of the work and the employee’s location; it does not specify the work persona for this position.

Requirements

• At least 8 years of experience in software engineering or information security roles, with a focus on security compliance and risk management.
• Fluency in Japanese, including reading, writing, and speaking.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Demonstrated experience developing, managing, and implementing security policies and compliance frameworks such as ISMAP, IRAP, C5, FedRAMP, ISO 27001, ISO 42001, NIST, GDPR, and SOC 2 Type 2.
• Knowledge of security principles, controls, and technologies or products.
• Familiarity with cloud security practices and cloud provider compliance standards for AWS, Azure, and GCP.
• Expertise with AWS services.
• Strong written, verbal, and presentation skills, with the ability to engage a wide range of stakeholders.
• Ability to identify security risks, implement mitigation strategies, and drive remediation end to end.
• Experience navigating international and domestic security regulations.

Nice To Haves

• Advanced degree.
• Certifications such as CISM, CISSP, or CISA.
• A strong inclination to eliminate recurring manual work through automation.

Responsibilities

• Build and own automated evidence-collection pipelines integrating cloud infrastructure, identity providers, source control, ticketing systems, and other security tooling.
• Design and implement continuous control monitoring so compliance is measured in real time.
• Replace manual, paper-driven compliance processes with software-based systems.
• Own the technical strategy for future certifications and regulatory frameworks, evaluating requirements and designing scalable solutions that minimize operational overhead.
• Apply LLMs and agents where appropriate to map controls to evidence, validate evidence, and flag control drift.
• Lead international compliance initiatives such as ISMAP, IRAP, and C5.
• Manage relationships with auditors and support smooth, compliant audits.
• Partner with stakeholders to implement compliance requirements and controls and drive remediation of findings.
• Create and transform policies, procedures, and other compliance documentation.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior