Compliance and Process Engineer – In Office (Houston, TX)

Summary:

We are seeking a Compliance and Process Engineer to join our Security Department, working closely with all  staff to ensure our policies, procedures, and implementations meet StateRAMP and internal security requirements. In this hands-on role, you will collaborate with a team of four other security professionals under the guidance of the Chief Information Security Officer (CISO). You will play a critical part in updating processes, monitoring compliance, and enforcing security policies to address evolving legal, regulatory, and organizational standards.

Key Responsibilities

1. Policy & Process Management
   • Develop, maintain, and update IT processes to ensure StateRAMP and internal security compliance.
   • Conduct regular audits and gap analyses to identify process deficiencies or areas for improvement.
2. Organization-Wide Process Updates
   • Collaborate with all staff, from technical teams to business units, to review and modify their existing processes.
   • Provide clear guidance and support to ensure full compliance with StateRAMP and internal security requirements.
3. Ongoing Monitoring & Enforcement
   • Implement monitoring mechanisms to track adherence to security and compliance requirements.
   • Enforce compliance policies, escalating issues and coordinating remediation actions with the relevant teams.
4. Collaboration & Training
   • Work closely with IT teams, security professionals, and management to educate and train on best practices, policy changes, and compliance requirements.
   • Serve as a liaison between technical and non-technical stakeholders to ensure shared understanding of compliance objectives.
5. Documentation & Reporting
   • Maintain detailed documentation of processes, standards, and compliance status.
   • Prepare reports and presentations for leadership, highlighting risks, remediation strategies, and progress updates.
6. Continuous Improvement & Change Management
   • Stay current with emerging compliance standards, laws, and security best practices.
   • Proactively recommend process improvements and tooling to strengthen compliance posture.
   • Lead or assist in change management initiatives as new compliance and security regulations arise.