DISCO
Compliance Engineer
New York City, New York · Mid
No sponsorship$53k-$800kDetected 65 days ago
PythonKotlinBash.NETGitDynamoDBRedshiftAWSAzureCloud PlatformsDockerTerraformCI/CDJenkinsDatadogDevOpsPlatform EngineeringComplianceStakeholder ManagementSalesforceCollaborationMentoring
About the role
- Given the massive growth of data over the last 20 years, poorly built legal technology products have severely decreased lawyers ability to practice the law.
- Great technology can solve problems of scale in data, in laws, and in business operations that have distracted lawyers from doing what they went to law school to do.
- DISCO is fixing the law by automating the parts of the practice that can be automated so that great lawyers can focus on tasks that really do require human legal judgment.
Responsibilities
- Infrastructure Governance: Work with DevOps Engineers to implement "Compliance as Code," establishing automated guardrails and performing internal reviews of infrastructure configurations.
- Access & Identity Management: Manage the technical lifecycle of user access, enforce Segregation of Duties (SoD), and review deprovisioning workflows to ensure compliance with security policies.
- Stakeholder Management: Support GRC teams by providing technical expertise during sales cycles, responding to RFPs, and maintaining the Security Trust Center and compliance documentation.
- Automation Focus: A desire and/or experience in leveraging compliance automation platforms (e.g., Anecdotes) to build and maintain automated evidence-gathering tools.
- Collaboration & Engineering Mindset: An engineering background with a preference for collaborative work, including mentoring others and partnering with cross-functional engineering teams to build and maintain highly performant systems.
- Experience building and managing PaaS (Platform as a Service) for internal development teams.
- At DISCO, our cloud infrastructure and system control plane are the backbone that enables us to deliver cutting-edge solutions to our clients.
- Your expertise will deliver enhancements to our system's reliability, scalability, security, and the overall success of our cloud-based solution development.
- By automating away the "audit burden" from our engineers your work will help shape our future cloud strategy while providing ironclad assurance to our partners within the business.
- Manage the technical lifecycle of user access, enforce Segregation of Duties (SoD), and review deprovisioning workflows to ensure compliance with security policies.
Requirements
- Technical Compliance Expertise: A minimum of 5 years in a technical compliance, security, or DevOps-adjacent role, preferably within a SaaS environment.
- Framework Fluency: Strong understanding of key compliance frameworks, including SOX 404, ISO-27001, SOC2, and IT general controls (ITGC).
- Even Better If You Have…
- Experience with Cloud Networking (VLAN, routing).
- Experience with other cloud platforms, specifically Azure and GCP.
- Familiarity with Windows Server and Administration (Active Directory, Group Policy Objects).
- Experience with ASP.NET Deployments (WebDeploy).
- General experience with Software Development and any tech stack.
Skills
- CI/CD: Terraform, Docker, Jenkins, CodeDeploy, GitHub, Artifactory, HashiCorp Consul
- Observability: ELK Stack, OpenTelemetry, DataDog, New Relic, Sentry.io
- Programming Languages: Python, Bash, Kotlin
- Perks of DISCO
- Open, inclusive, and fun environment
- Benefits, including medical, dental and vision insurance, as well as 401(k)
- Competitive salary plus RSUs
- Flexible PTO
- Growth opportunities throughout the company
- NYC Pay Range
- $155,000 - $190,000 USD
- Strong understanding of key compliance frameworks, including SOX 404, ISO-27001, SOC2, and IT general controls (ITGC).
Compensation
- Evidence Automation & Audit Stewardship: Serve as the Engineering technical contact for annual SOX, SOC2 Type II, and ISO-27001 audits while automating evidence collection into "Continuous Compliance" workflows with minimal disruption to engineering velocity.
- Competitive salary plus RSUs
Company info
- DISCO is a legal tech software company. Our objective is to own the legal tech market and become the leader in legal as Salesforce has done in the sales technology space. Given the massive growth of data over the last 20 years, poorly built legal technology products have severely decreased lawyers ability to practice the law.
- Our fundamental mission is to provide a unified technology platform for the practice of law. Great technology can solve problems of scale in data, in laws, and in business operations that have distracted lawyers from doing what they went to law school to do. DISCO is fixing the law by automating the parts of the practice that can be automated so that great lawyers can focus on tasks that really do require human legal judgment.
- Your Impact
- At DISCO, our cloud infrastructure and system control plane are the backbone that enables us to deliver cutting-edge solutions to our clients. As a Compliance Engineer on our growing DevOps team, you will be driving the implementation of our compliance requirements, as established by the Security and governance, risk, and compliance (GRC) stakeholders.
- DISCO is a legal tech software company.
- Our objective is to own the legal tech market and become the leader in legal as Salesforce has done in the sales technology space.
- Our fundamental mission is to provide a unified technology platform for the practice of law.
- Opportunity to be a part of a company that is revolutionizing the legal industry
Visa & Work Authorization
- Authorization to Work in the U.S.: Candidates must be legally authorized to work in the United States without sponsorship now or in the future.
This listing is sourced directly from DISCO's careers page and normalized into a canonical job model.