Remote Security And Compliance Jobs
Remote Security And Compliance jobs are open across the U.S. at remote-first firms, distributed tech teams, and regulated-industry companies building out their compliance functions without geographic constraints. Sectors including financial services, healthcare technology, and SaaS are actively hiring, and employers posting right now include Motive, Maximus, and Okta. Find a role that fits below and apply directly.
Find JobsOverview
Showing 4 of 24+ Remote Security And Compliance jobs
General Information
Location:
Position Type:
Virtual Eligible:
Job Category:
Ref #:
Description and Requirements
About the Position:
A Senior Security Engineer-Governance and Compliance works closely with colleagues in Information Technology, as well as with internal audit, compliance and other key stakeholders to develop information security strategies and build related programs that enhance the University’s ability to protect the confidentiality, availability and integrity of its information assets, including customer information. An individual serves as lead for implementing and configuring security tools within the University’s technology space, including implementing the framework for security standards and compliance of systems, infrastructure, cloud technologies and solutions or Identity and Access Management (IAM). Additionally, an individual contributes to enterprise-level policies and standards, leads incident response activities, and security issue remediation.
What You'll Do
1. Lead efforts to implement and configure security tools within the University’s technology space to protect its information assets, including customer assets; collaborate with information security peers and management to ensure various platforms, such as Azure, AWS, Private cloud, SaaS applications, are compliant and meet the University’s information security standards and regulatory requirements.
2. Monitor and recommend changes in strategies and standards that affect Information Security, especially in the area of privacy and identity theft; proactively assess potential items of risk and vulnerabilities in cloud technologies and applications or IAM; establish and provide security governance during the systems development lifecycle, construction, and maintenance of cloud or IAM technologies and solutions using DevOps, DevSecOps, and Agile development methodologies.
3. Identify opportunities to improve risk posture, develop solutions for remediating or mitigating risks and assessing the residual risk. Communicates risk findings to Information Security customers and business partners; develop remediation plans and coordinate with appropriate service, application, and technology owners through the completion of those plans, as appropriate.
4. Evaluate existing Information Security standards and updates according to technology advances, changes in business process and threat landscape; adjust existing Information Security standards to align with leading cloud and/or IAM security practices and technologies.
5. Hands-on experience with designing, implementing, and managing IAM and/or cloud solutions while overseeing user access provisioning, deprovisioning and role-based access controls (RBAC)
6. Maintain detailed working knowledge and awareness of concepts within the following: Identity & Access Management (IAM), Access Controls, Authorization, Encryption of data at rest / in transit, multi-factor authentication, SAML, Single-Sign-On, Social Sign On, web application firewalls, etc.
7. Work collaboratively across cross-functional teams to integrate IAM and/or cloud solutions and services; maintaining runbooks for cloud and/or IAM workflows and processes.
8. Able to provide support after normal business hours, as needed.
9. Perform other duties as assigned or apparent
NOTE: The Primary Accountabilities above are intended to describe the general content and requirements of the position and are not intended to be an exhaustive statement of duties. Incumbents may perform all or most of the Primary Accountabilities listed above. Specific goals or responsibilities will be documented in incumbents’ performance objectives as outlined by the incumbents’ immediate manager.
Supervisory Responsibilities
None
MINIMUM EDUCATION AND RELATED WORK EXPERIENCE:
- Bachelor’s degree in Computer Science, Business, or related area
- Ten (10) years of progressive experience in Information Security related roles with at least Six (6) years of hands-on experience
- Security related certifications e.g., CISSP, CISM, CISA
ADDITIONAL QUALIFICATIONS:
- Ability to align compliance regulations (SOX, GLBA, etc.)
- Experience with being an audit liaison and support
- Experience with controls documentation and accuracy
- Experience with vendor management
- Experience with legal contract support
- Experience with simplified artifacts retrieval
- Ability to QA process for validation of evidence before providing
- Cybersecurity Insurance
- Experience with automation of evidence collection and process
- Able to provide support after normal business hours as needed
- Industry recognized certifications specific to IAM (e.g. Certified Identity and Access Manager, Identity and Access Administrator Associate, etc.)
- Working knowledge of industry frameworks related to information security (e.g. ISO 27000, NIST, etc.)
- Experienced in network and Security components, including firewalls, intrusion detection systems, anti-malware products, e-Discovery and forensics tools and products, IT Risk Management methodologies, data encryption, VPN's, vulnerability scanners, multiple operating systems (Windows, UNIX, Linux, etc.), cloud security groups, and directory services (Active Directory, LDAP)
- Subject Matter Expert (SME) level knowledge of security tools, trends, methodologies, and best practices for securing platforms and operating systems at the server, client, and handheld level
- Expert knowledge of information security risks and countermeasures for Windows, Unix/Linux platforms and cloud environments
- Experience with principal and policy-based security design methodologies with understanding of IaaS, PaaS, and SaaS models
- Able to create and manage Security solutions with a high degree of integration
- Strong understanding of regulatory requirements (PCI, SOX, GLBA) and how they impact information security functions
- Demonstrated ability to work effectively in a collaborative team environment as an individual contributor
- Strong business analysis skills
- Able to learn quickly, absorb and retain information, and apply knowledge when and where relevant
- Self-motivated and able to work on own initiative with minimal guidance and a desire to see tasks through to completion
- Experience managing a varied and heavy workload
#LI-Remote
As an Equal Opportunity employer, we particularly encourage applications from members of historically underrepresented racial/ethnic groups, women, individuals with disabilities, veterans, LGBTQ community members, and others who demonstrate the ability to help us achieve our vision of a diverse and inclusive community.
- Annual Bonus Award
- Medical, dental and vision plans; Flexible Spending Accounts; Health Savings Accounts; Life and Disability insurance; and our Wellness incentive program;
- Competitive 401(k) employer match;
- Substantial tuition discount for you and eligible dependents; and,
- A generous time off package, including paid vacation, sick time and company holidays.*
General Information
Location:
Position Type:
Virtual Eligible:
Job Category:
Ref #:
Description and Requirements
About the Position:
A Senior Security Engineer-Governance and Compliance works closely with colleagues in Information Technology, as well as with internal audit, compliance and other key stakeholders to develop information security strategies and build related programs that enhance the University’s ability to protect the confidentiality, availability and integrity of its information assets, including customer information. An individual serves as lead for implementing and configuring security tools within the University’s technology space, including implementing the framework for security standards and compliance of systems, infrastructure, cloud technologies and solutions or Identity and Access Management (IAM). Additionally, an individual contributes to enterprise-level policies and standards, leads incident response activities, and security issue remediation.
What You'll Do
1. Lead efforts to implement and configure security tools within the University’s technology space to protect its information assets, including customer assets; collaborate with information security peers and management to ensure various platforms, such as Azure, AWS, Private cloud, SaaS applications, are compliant and meet the University’s information security standards and regulatory requirements.
2. Monitor and recommend changes in strategies and standards that affect Information Security, especially in the area of privacy and identity theft; proactively assess potential items of risk and vulnerabilities in cloud technologies and applications or IAM; establish and provide security governance during the systems development lifecycle, construction, and maintenance of cloud or IAM technologies and solutions using DevOps, DevSecOps, and Agile development methodologies.
3. Identify opportunities to improve risk posture, develop solutions for remediating or mitigating risks and assessing the residual risk. Communicates risk findings to Information Security customers and business partners; develop remediation plans and coordinate with appropriate service, application, and technology owners through the completion of those plans, as appropriate.
4. Evaluate existing Information Security standards and updates according to technology advances, changes in business process and threat landscape; adjust existing Information Security standards to align with leading cloud and/or IAM security practices and technologies.
5. Hands-on experience with designing, implementing, and managing IAM and/or cloud solutions while overseeing user access provisioning, deprovisioning and role-based access controls (RBAC)
6. Maintain detailed working knowledge and awareness of concepts within the following: Identity & Access Management (IAM), Access Controls, Authorization, Encryption of data at rest / in transit, multi-factor authentication, SAML, Single-Sign-On, Social Sign On, web application firewalls, etc.
7. Work collaboratively across cross-functional teams to integrate IAM and/or cloud solutions and services; maintaining runbooks for cloud and/or IAM workflows and processes.
8. Able to provide support after normal business hours, as needed.
9. Perform other duties as assigned or apparent
NOTE: The Primary Accountabilities above are intended to describe the general content and requirements of the position and are not intended to be an exhaustive statement of duties. Incumbents may perform all or most of the Primary Accountabilities listed above. Specific goals or responsibilities will be documented in incumbents’ performance objectives as outlined by the incumbents’ immediate manager.
Supervisory Responsibilities
None
MINIMUM EDUCATION AND RELATED WORK EXPERIENCE:
- Bachelor’s degree in Computer Science, Business, or related area
- Ten (10) years of progressive experience in Information Security related roles with at least Six (6) years of hands-on experience
- Security related certifications e.g., CISSP, CISM, CISA
ADDITIONAL QUALIFICATIONS:
- Ability to align compliance regulations (SOX, GLBA, etc.)
- Experience with being an audit liaison and support
- Experience with controls documentation and accuracy
- Experience with vendor management
- Experience with legal contract support
- Experience with simplified artifacts retrieval
- Ability to QA process for validation of evidence before providing
- Cybersecurity Insurance
- Experience with automation of evidence collection and process
- Able to provide support after normal business hours as needed
- Industry recognized certifications specific to IAM (e.g. Certified Identity and Access Manager, Identity and Access Administrator Associate, etc.)
- Working knowledge of industry frameworks related to information security (e.g. ISO 27000, NIST, etc.)
- Experienced in network and Security components, including firewalls, intrusion detection systems, anti-malware products, e-Discovery and forensics tools and products, IT Risk Management methodologies, data encryption, VPN's, vulnerability scanners, multiple operating systems (Windows, UNIX, Linux, etc.), cloud security groups, and directory services (Active Directory, LDAP)
- Subject Matter Expert (SME) level knowledge of security tools, trends, methodologies, and best practices for securing platforms and operating systems at the server, client, and handheld level
- Expert knowledge of information security risks and countermeasures for Windows, Unix/Linux platforms and cloud environments
- Experience with principal and policy-based security design methodologies with understanding of IaaS, PaaS, and SaaS models
- Able to create and manage Security solutions with a high degree of integration
- Strong understanding of regulatory requirements (PCI, SOX, GLBA) and how they impact information security functions
- Demonstrated ability to work effectively in a collaborative team environment as an individual contributor
- Strong business analysis skills
- Able to learn quickly, absorb and retain information, and apply knowledge when and where relevant
- Self-motivated and able to work on own initiative with minimal guidance and a desire to see tasks through to completion
- Experience managing a varied and heavy workload
#LI-Remote
As an Equal Opportunity employer, we particularly encourage applications from members of historically underrepresented racial/ethnic groups, women, individuals with disabilities, veterans, LGBTQ community members, and others who demonstrate the ability to help us achieve our vision of a diverse and inclusive community.
- Annual Bonus Award
- Medical, dental and vision plans; Flexible Spending Accounts; Health Savings Accounts; Life and Disability insurance; and our Wellness incentive program;
- Competitive 401(k) employer match;
- Substantial tuition discount for you and eligible dependents; and,
- A generous time off package, including paid vacation, sick time and company holidays.*
See All 24 Remote Security And Compliance Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsRemote Security And Compliance Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software
- Trucking
What Employers Look For
The qualifications that appear most often in remote security and compliance jobs.
- Bachelor's degree in information security, cybersecurity, finance, or a related field
- Hands-on experience with compliance frameworks such as SOC 2, HIPAA, PCI-DSS, or NIST
- Industry certifications including CISA, CISSP, CISM, or CRISC
- Proficiency with GRC platforms such as Archer, ServiceNow GRC, or similar tools
- Experience conducting internal audits, risk assessments, and control gap analyses
- Strong written communication skills for policy documentation and audit reporting
Tips for Your Remote Security And Compliance Job Search
Apply early to remote roles that fit
Migrate Mate lists remote security and compliance openings from across the U.S. in one place. Check it regularly and apply directly to roles that match your certifications and focus area before postings close, since remote openings often attract applications quickly.
Show your async communication skills upfront
Remote security and compliance work runs on written output. Use your cover letter and resume to demonstrate clear, precise writing, because employers judge whether you can document policies, communicate risk findings, and run audits without back-and-forth in the office.
Prepare compliance artifacts as portfolio evidence
Bring sample work to interviews: a redacted risk assessment, a policy draft, or a controls mapping exercise. Remote hiring managers want proof you can produce the actual deliverables of the role independently, not just describe your past responsibilities.
Target companies using the tools you know
Remote security and compliance teams rely heavily on specific GRC platforms, SIEM tools, and cloud security configurations. Identify the platforms a company mentions in its job posting and make your hands-on experience with those tools explicit in your application.
Remote Security And Compliance Jobs: Frequently Asked Questions
How do I get a remote security and compliance job?
Target companies that are already operating with distributed teams, because they've built the workflows that let security and compliance professionals do meaningful work without being on-site. Remote employers screen hard for written communication, since policy documentation, audit findings, and risk assessments all travel async. Certifications like CISA, CISSP, or CIPP signal credibility quickly, and a portfolio of real compliance artifacts or security assessments gives you a concrete edge over candidates who only list responsibilities.
Which companies hire remote security and compliances?
Remote security and compliance roles are posted by Motive, Maximus, and Okta and others right now, based on current remote listings on Migrate Mate as of September 2026. These tend to be remote-first technology firms, cloud-native companies, and regulated-industry employers in healthcare and financial services that manage compliance obligations across distributed teams.
Can you get a remote security and compliance job with no experience?
Yes, but remote entry-level roles in this field are harder to land because employers expect you to operate independently from day one without in-office mentorship. Cloud security fundamentals, GRC platform familiarity, and entry-level certifications like CompTIA Security+ open doors at remote-first startups and managed security service providers. Documenting a self-directed lab project or a sample risk assessment shows remote employers you can produce real work without hand-holding.
Do you need a degree for remote security and compliance jobs?
Not always. Many remote employers weight certifications, demonstrated hands-on skills, and verifiable results more heavily than a formal degree, particularly for roles focused on GRC tools, policy writing, or security auditing. A degree can help at larger enterprises or for roles with a regulatory-advisory component, but candidates who show practical competence through certifications, project work, and clear written communication consistently compete for remote openings without one.
Which industries hire the most remote security and compliances?
Most remote security and compliance openings sit in Technology & Software and Trucking, per current remote listings on Migrate Mate as of September 2026. These sectors hire security and compliance professionals remotely because their compliance obligations, data protection requirements, and risk frameworks apply equally regardless of where the team is located.
See All 24 Remote Security And Compliance Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs