# Staff Security Engineer

**Company:** [Mozilla](https://hotfix.jobs/companies/mozilla)
**Location:** Remote
**Role:** Security Engineering
**Salary:** $139k – $218k/yr
**Experience:** 7+ years
**Skills:** information security, GRC, ISO 27001, SOC 2, isms, statement of applicability, risk treatment plans, security policies, internal audit, cisa, cissp, iso 27001 lead auditor, iso 27001 lead implementer
**Posted:** 2026-08-11

> Leads Mozilla’s security compliance and governance programs, maintaining the ISMS and supporting ISO 27001 and SOC 2 Type 2 audits. The role requires at least five years of information security or GRC experience, strong policy and remediation expertise, and effective cross-functional collaboration.

## Job Description

## Responsibilities

- Maintain and mature the Information Security Management System (ISMS), including the Statement of Applicability (SoA), risk treatment plans, and Management Review Meeting (MRM) processes.
- Support ISO 27001 and SOC 2 Type 2 audits, including scope determination, evidence and narrative preparation, auditor interviews and walkthroughs, and resolution of findings.
- Contribute to the SOC 2 System Description and other audit documentation.
- Track gaps and remediation efforts from readiness assessments and audits.
- Lead the security policy program, including policy creation, revision, and cross-functional review cycles.
- Support compliance scaling as additional products or business units pursue readiness assessments and certification.
- Support internal audits required by ISO 27001.
- Partner with Engineering, IT, Legal, Privacy, People teams, and product leadership to gather evidence, drive control ownership, and translate compliance requirements into practical workflows.
- Advise Security leadership on audit risk, certification readiness, and compliance strategy.

## Requirements

- 5 years of experience in information security, GRC, or compliance-focused roles.
- Deep familiarity with ISO 27001 and SOC 2 Trust Services Criteria, including meaningful involvement in audits from readiness through certification.
- Experience across the full breadth of an ISMS, including SoA maintenance, Management Review Meetings, and System Description authorship.
- Experience writing and revising security policies and managing cross-functional review cycles.
- Experience tracking gaps and remediation plans within broader compliance and risk programs.
- Strong cross-functional collaboration and communication skills, including the ability to translate compliance requirements into actionable workflows.
- Ability to work independently, ramp quickly, and build processes where none exist.
- Ability to represent the organization credibly before external auditors.

## Nice to have

- CISA, CISSP, ISO 27001 Lead Auditor, or ISO 27001 Lead Implementer certification.

## Compensation and benefits

- Performance-based bonus plans for eligible employees.
- Medical, dental, and vision coverage.
- Retirement contributions with immediate vesting.
- Company wellness days, paid holidays, and birthday leave.
- Home office stipend.
- Annual professional development budget.
- Well-being stipend.
- Paid parental leave.
- Employee referral bonus program.
- Life and accidental death and dismemberment insurance, disability coverage, and employee assistance program benefits.

## Similar roles

- [Staff Product Security Engineer](https://hotfix.jobs/jobs/049ea363-7a08-4041-a40c-8ef13a669441) - Okta - Bellevue, WA - $141k – $248k/yr
- [Member of Technical Staff II](https://hotfix.jobs/jobs/dd53eb25-fb53-42c1-ad77-cb735c8819de) - Illumio - Sunnyvale, CA - $141k – $162k/yr
- [Staff Security Engineer](https://hotfix.jobs/jobs/5b580478-4136-48f8-bf55-d821d66f2a52) - Okta - San Francisco, CA - $134k – $185k/yr
- [Senior Staff Information Security Engineer](https://hotfix.jobs/jobs/19031bec-5087-41a6-9c14-ec544b40f8cd) - NMI - Remote - $145k – $165k/yr
- [Staff Cloud Security Engineer](https://hotfix.jobs/jobs/aa980ffc-df45-4961-97ec-011928aba41d) - NinjaTrader - Chicago, IL - $145k – $195k/yr

**Apply:** https://hotfix.jobs/jobs/e2df08d8-72b2-497f-a46c-a4cf08c27cb7
**Canonical:** https://hotfix.jobs/jobs/e2df08d8-72b2-497f-a46c-a4cf08c27cb7