Security Compliance Engineer

ASUS

. Develop and maintain the system security plan and related security compliance documentation for ARAIC products, infrastructure, and development processes .

Posted 10/10/2026full-timeBoston • Massachusetts • United StatesMid-LevelSenior💰 $100,000 - $150,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and maintaining security compliance documentation, coordinating security efforts across diverse engineering teams, and managing risk assessments and security controls. Proficient in integrating compliance into workflows and providing security training to stakeholders.

Highest-signal resume keywords

Information SecuritySecurity ComplianceRisk ManagementNIST Risk Management FrameworkCISSP

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Controls DevelopmentRisk Assessment MethodsDocumentation SkillsSecure System DesignConfiguration Management

Soft Skills

Organizational SkillsWritten Communication SkillsFlexibilityCollaboration

Tools & Technologies

Compliance Tracking ToolsDevSecOps PracticesCI/CD Pipelines

Certifications & Qualifications

CISSPCISACISMCRISCCompTIA Security+

Industry Keywords

Information AssuranceAudit ReadinessSecurity ArchitectureEmbedded SystemsCloud Security

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Develop and maintain the system security plan and related security compliance documentation for ARAIC products, infrastructure, and development processes
Map security controls to applicable frameworks and standards and identify gaps between documented controls and implemented systems
Coordinate security efforts across hardware, embedded, cloud, and application engineering teams within a coherent security architecture
Coordinate threat modeling, risk assessments, and control prioritization
Own certification and audit readiness, including assessment packages, readiness declarations, evidence collection, and responses to assessor requests
Build and maintain standard operating procedures for information assurance and compliance activities
Establish configuration and change management processes that keep security documentation aligned with implemented systems
Partner with DevOps and engineering teams to integrate compliance controls, validation, evidence generation, and secure software supply chain practices into workflows
Provide security awareness guidance and training to engineering and business teams
Collaborate with engineering teams in Boston and Taipei and external assessors

Requirements

What you’ll need

Bachelor’s degree or higher in cyber operations, information security, computer science, or related field
5+ years of experience in information security, information assurance, security compliance, or risk management, including responsibility for secure systems in an operational setting
Working knowledge of security and compliance frameworks such as the NIST Risk Management Framework, NIST SP 800-53 or SP 800-171, CMMC, or ISO 27001
Experience with risk assessment methods and development of security controls, policies, and procedures
Experience managing secure communications, cryptographic material, or controlled information in a regulated environment
Strong documentation and written communication skills, including ability to produce audit-ready material and explain security requirements to technical and non-technical stakeholders
Demonstrated organizational skill and follow-through coordinating work across multiple teams and disciplines
Flexibility to attend virtual meetings with the Taiwan-based team at least three nights per week
Ability to travel to Taipei once per quarter for approximately two to three weeks
Ability to work in a rapidly changing, fast-paced, results-oriented environment with a high degree of flexibility
Excellent written and verbal communication skills in English
Applicants must be authorized to work for any employer in the United States; visa sponsorship is not available
Familiarity with secure system design concepts such as hardware roots of trust, secure boot, certificate management, and configuration management is a plus
Experience with requirements management or compliance tracking tools is a plus
Familiarity with DevSecOps practices and CI/CD pipelines is a plus
Relevant certifications such as CISSP, CISA, CISM, CRISC, or CompTIA Security+ are a plus

Benefits

Comp & perks

Bonuses
Medical insurance
Dental insurance
Vision insurance
Life insurance
AD&D insurance
Paid Time Off
EAP
401(k)
Hybrid work arrangement (3 days in office/2 days work from home)