Staff Security Engineer

RemoteLeadPosted Aug 17, 2026

ISO 27001SOC 2GRCISMSRisk managementCISSPSecurityCompliance

About this role

Lead Mozilla's GRC function by maintaining and advancing the Information Security Management System (ISMS) and supporting ISO 27001 and SOC 2 Type 2 compliance programs. Work cross-functionally to build scalable security processes and represent Mozilla in external audits.

Must have

5 years of experience in information security, GRC, or compliance-focused roles

Deep familiarity with ISO 27001 and SOC 2 Trust Services Criteria through full audit cycles

Experience maintaining ISMS including SoA, risk treatment plans, and MRM processes

Demonstrated experience writing and revising security policies with cross-functional review

Experience tracking gaps and remediation plans for compliance programs

Strong cross-functional collaboration with engineers, legal, and executive stakeholders

Ability to operate independently and build processes from scratch

Strong written and verbal communication for external auditor representation

Relevant certifications such as CISA, CISSP, or ISO 27001 Lead Auditor are a plus

Technologies

SecurityCISSPRisk managementISO 27001SOC 2GRCISMSCompliance

Responsibilities

Maintain and mature the ISMS including SoA, risk treatment plans, and MRM process

Support ISO 27001 and SOC 2 Type 2 audit execution from scope to findings resolution

Contribute to SOC 2 System Description and audit narrative documentation

Track gaps and remediation efforts from readiness assessments and audits

Lead security policy program driving creation, revision, and cross-functional review

Support compliance scaling for additional products and business units

Support internal audit function to meet ISO 27001 requirements

Partner with Engineering, IT, Legal, Privacy, and product leadership on controls

Advise GRC manager and Security leadership on audit risk and program strategy

Benefits

Health insuranceDental insuranceVision insuranceRetirement benefits with matchFlexible PTOWellness allowanceHome office allowanceParental leaveReferral programProfessional development

Amenities

Generous performance-based bonus plansQuarterly all-company wellness daysCountry-specific holidays plus birthday offOne-time home office stipendAnnual professional development budgetQuarterly well-being stipendEmployee referral bonus program