Cyber Security Engineer V, San Jose

Stellar Consulting Solutions - San Jose, CA

Full-time - Senior

San Jose, CA

Administrative and Support Services

About the position

The Cyber Security Engineer V position at Stellar Consulting Solutions involves providing expert guidance on security compliance and risk management to business leaders and stakeholders. The role requires a deep understanding of security controls and the ability to facilitate the adoption of security standards across the organization. The engineer will be responsible for assessing compliance, advising on security requirements, generating reports, and coordinating audit activities to enhance the company's security practices.

Responsibilities

• Provide pragmatic guidance to business leaders and stakeholders balancing security compliance risks with business needs.
• Work closely with internal business units to assess compliance and support remediation of non-compliant areas.
• Understand security controls and business processes to promote the adoption of applicable security standards.
• Advise management on security requirements and their impact on business processes, applications, and systems.
• Generate periodic reports for teams and senior stakeholders with practical recommendations to improve security practices.
• Research industry standards and trends to enhance internal controls and compliance.
• Facilitate organizational adoption of new security controls and best practices through change management strategies.
• Document security control requirements and develop methods to meet new cybersecurity and compliance needs.
• Coordinate compliance and audit activities with other groups.

Requirements

• 7+ years of security and compliance experience, preferably in eCommerce, Payments, or Technology.
• Experience with PCI DSS, SOC 2, ISO 27001, NIST, or other industry standard control frameworks.
• Experience managing third-party audits and collecting evidence for audits.
• Strong technical understanding of security compliance requirements and solutions, as well as threats impacting information protection.
• General knowledge of networking, encryption, authentication, payment infrastructure, cloud infrastructure, and application security.
• Ability to transition between high-level strategic concepts and tactical operational implementation.
• Self-starter with a bias towards action, thriving in fast-paced environments.
• Exceptional communication skills, including clear writing and engaging presentation style.
• Strong teamwork skills with a demonstrated ability to collaborate across teams.