Security Engineer • Mid-Level

Who you are

You have a strong background in security governance, risk management, and compliance — you've successfully implemented security programs that ensure customer trust and regulatory compliance. Your experience in building operational frameworks allows you to create processes that support secure service delivery in a startup environment.

You thrive in a remote work setting and are comfortable collaborating with diverse teams across the U.S. — your communication skills enable you to effectively engage with stakeholders and ensure alignment on security initiatives. You are proactive in identifying potential risks and developing strategies to mitigate them, ensuring the organization remains compliant with relevant regulations.

What you'll do

As the first Security GRC Program Manager at Vanilla Technologies, you will own the development and execution of our security compliance programs — your role will involve establishing policies and procedures that align with industry standards and regulatory requirements. You will work closely with cross-functional teams to integrate security practices into the product development lifecycle, ensuring that security is a priority from the outset.

You will lead efforts to assess and manage risks associated with our operations and technology — this includes conducting regular audits, vulnerability assessments, and risk assessments to identify areas for improvement. Your expertise will guide the organization in maintaining compliance with federal, state, and local laws, as well as industry best practices.

In addition to compliance management, you will be responsible for fostering a culture of security awareness within the organization — you will develop training programs and resources to educate employees about security policies and best practices, empowering them to contribute to a secure environment.

What we offer

At Vanilla Technologies, we offer a flexible remote work environment that encourages collaboration and innovation. You will have the opportunity to shape the security landscape of a growing startup and make a significant impact on our operations and customer trust. We value diverse perspectives and are committed to creating an inclusive workplace where everyone can thrive.