Security Governance & Compliance Specialist

About the role

Join Splunk’s Tech Compliance team to lead security and compliance programs that protect our customers’ digital systems. You will act as the bridge between security policy and engineering execution, driving risk mitigation, audit readiness and automated evidence collection across cloud environments.

Key responsibilities

• Plan and execute security and technology audits from planning through certification, coordinating auditors, collecting evidence and tracking remediation.
• Serve as the primary contact for internal and external auditors for commercial compliance programs.
• Conduct gap assessments, audit readiness reviews and supervise remediation activities.
• Translate compliance requirements into actionable guidance for engineering, product and operations teams.
• Partner with DevOps and Engineering to embed compliance controls and evidence generation into CI/CD and infrastructure‑as‑code workflows.
• Design, build and operate automated solutions for collecting and validating audit evidence.
• Support continuous monitoring to maintain compliance posture between audit cycles.

Required profile

• Bachelor’s degree plus 5+ years of experience in technical compliance, security, risk or audit (or equivalent practical experience).
• Direct experience leading audit or certification programs, including control mapping, evidence collection and auditor engagement.
• Hands‑on experience building automation for evidence collection, compliance testing or reporting.
• Solid understanding of security controls and governance in AWS, GCP and Azure cloud environments.
• Strong written and verbal communication skills for interacting with auditors, engineers and senior leaders.

Required skills

• Python
• Go
• Terraform
• CloudFormation
• AWS
• Google Cloud Platform (GCP)
• Microsoft Azure
• Scripting and automation tools for CI/CD pipelines