23 hours ago
Base Salary
$149k - $186k/yr
Responsibilities
- Build and maintain a security data lake on Fivetran to centralize data for continuous control monitoring.
- Govern the security data lake through data-quality, retention, least-privilege access, and sensitive-data handling controls.
- Build compliance-as-code, automated evidence collection, continuous control monitoring, and policy-as-code checks across cloud, Kubernetes, identity, CI/CD, and SaaS systems.
- Integrate and extend GRC tooling and internal platforms using APIs, scripts, and workflows to replace manual audit work.
- Support Fivetran certifications and attestations, internal and external audits, risk management, and vendor assessments.
- Translate control requirements into technical tests and technical results into audit-ready narratives.
Requirements
- 5+ years of experience in GRC, security engineering, data engineering, or a related field.
- Experience with control testing, control documentation, and control design.
- Strong SQL skills and proficiency in Python or a similar language for automation and data transformation.
- Hands-on experience with a modern data stack, including cloud warehouses or lakes, ETL/ELT, orchestration, and transformation tooling.
- Experience automating control testing or replacing manual compliance processes with code-driven checks.
- Working knowledge of several security and compliance frameworks, including the ISO 27001 family, SOC 2, PCI DSS, and HITRUST.
- Familiarity with cloud security controls in AWS, GCP, or Azure and common SaaS security configurations.
- Clear written communication and ability to work across Security, IT, Engineering, Legal, and Finance.
- Advanced security risk or audit certifications are required.
- Experience with external audits and professional certifications such as CISA, CISSP, AWS, or SANS GIAC are preferred.
Benefits
- Full-time hybrid position based in Denver with two days in the office each week and remote flexibility.
- 100% employer-paid medical insurance, subject to country and worker-type variation.
- Paid vacation or flexible/unlimited vacation depending on role and country, paid sick time, inclusive parental leave, paid holidays, a year-end Global Week of Rest, and volunteer days off.
- RSU stock grants.
- Professional development and training opportunities.
- Company virtual happy hours, free food, team-building activities, and a monthly cell phone stipend.
- Access to a mental health support platform offering therapy, coaching, and self-guided mindfulness resources for covered employees and dependents.
Categories
Data EngineeringSecurity
About Fivetran
Fivetran builds a managed data integration platform that extracts data from hundreds of SaaS apps and databases and loads it into cloud data warehouses for analytics and AI teams. Sold as a subscription SaaS service, it provides prebuilt connectors, automated schema management, and ELT/replication to destinations like Snowflake, BigQuery, Databricks, and Redshift. Founded in 2012 and headquartered in Oakland, it serves customers such as Autodesk, Condé Nast, JetBlue, and Morgan Stanley.