Security Governance

Security Governance Engineer Jobs

2 jobs found

1d ago

Lead Corporate Security Engineer

Suno New York, NY

New York, NY

1d ago

$165k - $220k/yr Full time Endpoint Security Identity And Access Governance Identity and Access Management

Apply Now

Job Description

Lead the corporate security domain end to end for Suno’s Corporate IT environment, set the standards, and drive roadmap execution.

Responsibilities

Own corporate security end to end across identity and access governance, endpoint and vulnerability management, detection and response, third-party integration risk, vendor assessment, and SaaS posture
Build the security team, enable others, and stay hands-on to mature systems, processes, and behaviors
Set the corporate security roadmap for what to secure, in what order, and to what bar, with buy-in from leadership and XFN stakeholders
Own Suno’s access model, including RBAC and entitlement design, least-privilege defaults, and the governance layer in Lumos that enforces them
Define the expected standard for access reviews, certifications, and approvals, then build toward it rather than importing an external framework
Drive access lifecycle automation so joiner/mover/leaver is correct by default, with exceptions visible
Develop a model for non-human identity (service accounts, agents, automations) as these accounts represent an increasing share of access
Own the security standard for the fleet: hardening baseline, compliance signals, device trust, and how endpoint posture informs access decisions
Own third-party vulnerability management as a program, including coverage, risk-based remediation SLAs, reporting, and negotiation with teams responsible for tooling
Partner with the IT engineer who owns Kandji to ensure security standards become deployed policy without degrading how people work
Own EDR deployment and maintenance
Collaborate with Detection and Response on corporate security incidents until closure
Own third-party access evaluation: integration and OAuth review for Slack, Google Workspace, and the rest of the portfolio, plus vendor security assessment at purchase and renewal
Define risk appetite in practice and make it understandable for consistent application by others
Turn recurring decisions into policy, scope guidance, and tooling so the review queue shrinks as the company grows
Build and own the SaaS application program, including the bar, assessment cadence, and remediation process
Improve tenant-level configuration across the portfolio: SSO and SCIM coverage, MFA and session policy, admin role hygiene, OAuth grant and token management, and data sharing defaults
Work with IT, Security, Engineering, AI Enablement, and Legal to shape how Suno builds and buys
Influence the scope of next steps, including how GRC plugs in, what to automate versus staff, and where to invest next
Mentor and raise the technical bar for partners, including those who are not security specialists

Requirements

~8+ years in corporate/enterprise security or security engineering, including owning identity, endpoint, or SaaS security as a domain (not only ticket-based work)
Deep hands-on expertise with a modern IdP and IGA/access-governance tooling (Lumos, Veza, ConductorOne, Opal, or similar)
Experience designing entitlements/RBAC across a large SaaS portfolio and understanding operational tradeoffs
Endpoint security depth in a macOS-primary fleet, including MDM-delivered hardening, compliance, device trust, and scaled patch/vulnerability management
Strong command of OAuth, SAML, OIDC, and SCIM, plus the risk model for third-party integrations
Proven ability to set a security standard that others can apply without direct enforcement by you (policy, tooling, defaults, or all three)
Ability to influence engineering and business teams that do not report to you, early enough to change outcomes
Automation fluency with Python or TypeScript, REST APIs, and a habit of building integrations/internal tooling
Excellent writing and judgment under ambiguity; able to align with executives and adjust direction based on evidence
Calibrated sense of risk, including communicating likelihood, impact, and tradeoffs

Technologies

Lumos, Veza, ConductorOne, Opal, Kandji, EDR, OAuth, SAML, OIDC, SCIM, RBAC, MFA

Compensation

$165,000 - $220,000 per year

Benefits

Company equity package
401(k) with 3% Employer Match and Roth 401(k)
Medical, Dental, & Vision Insurance (PPO w/ HSA & FSA options)
11 Paid Holidays + Unlimited PTO & Sick Time
16 weeks of paid parental leave
Creative education stipend
Generous commuter allowance
In-office lunch (5 days per week)

First 90 Days

Form an informed view of Suno’s security posture
Build working relationships with IT engineers and the broader Security team
Identify the three things the team’s view is wrong about

First 6 Months

Establish a corporate security roadmap aligned with IT and the CISO
Make sequencing and tradeoffs explicit
Ensure highest-risk items are already moving

First Year

Reduce entitlement sprawl and the vulnerability backlog measurably
Align detection to real risks
Keep third-party review fast enough that teams do not route around it
Sustain the standard through tooling and shared judgment rather than direct involvement

Helpful, Not Required

Insider risk or DLP programs
Zero-trust network access
SOC 2 or ISO program ownership
Just-in-time access patterns or identity-as-code
Securing AI agent and non-human identity access
Experience as the first or second security hire at a fast-growing company

Location and Work Policy

New York, NY (onsite)
Expected to work from Suno’s NYC or Cambridge, MA office 5 days per week, per Suno’s policy
Eligible travel up to 25% to lead team members and support offices across Suno locations
Deliberate cadence in Cambridge and NYC during the first six months

Additional Notes

Applicants must be eligible to work in the US
Full-time employees receive competitive equity packages and comprehensive benefits
Base salary may vary based on location, skills, qualifications, and experience

View full job page →

5d ago

Principal Information Security Engineer

State of Minnesota - Minnesota IT Services St. Paul, MN

St. Paul, MN

5d ago

$40 - $69/hr Full time Cloud Platforms Hipaa & Healthcare Compliance Identity and Access Management

Apply Now

Job Description

The Principal Information Security Engineer (PISE) will design, implement, and maintain enterprise-wide information security programs to help protect State information assets. This senior role provides technical leadership across multiple security domains and supports statewide policy, risk assessment, and control integration efforts.

Responsibilities

Design, implement, and maintain enterprise-wide information security programs that protect State information assets from internal and external threats.
Provide technical leadership across multiple security domains, including governance, risk management, security architecture, network and application security, incident response, business continuity, and compliance, ensuring alignment with broader IT systems and organizational objectives.
Develop and recommend information security policies, standards, and best practices.
Lead security risk assessments and reporting.
Guide the integration of security controls into new and existing systems.
Support training, certification, and project management initiatives.
Serve as a lead engineer for establishing and maintaining the cybersecurity framework within Minnesota Health and Human Services, supporting government entities as they manage risk, strengthen security posture, and meet enterprise security requirements.

Requirements

Minimum five (5) years of information security engineering experience demonstrating work in information security, cybersecurity, or information technology, including enterprise security engineering, security architecture, risk management, or security operations.
Experience developing, implementing, or maintaining enterprise information security controls, security policies, standards, risk assessments, or governance processes using recognized security frameworks such as NIST, ISO 27001, COBIT, or similar industry standards.
Experience interpreting and applying information security or privacy regulations (for example, HIPAA, CJIS, PCI DSS, or IRS FTI) and preparing security documentation, risk assessments, policies, or technical reports.
Experience leading or coordinating information security projects and providing technical guidance or consultation to IT staff, project teams, or business stakeholders.
Demonstrated ability to communicate clearly and effectively to facilitate mutual understanding.
Customer-focused approach grounded in active listening, empathy, and solution-oriented problem-solving to deliver positive user experiences.

Technologies

NIST, ISO 27001, COBIT
HIPAA, CJIS, PCI DSS, IRS FTI
Azure security tools, Defender for Cloud
Entra ID, Key Vault
CISSP, GSEC, CEH
CCE, ENCE, GSFI, ITIL

Preferred Qualifications

Experience mentoring technical staff, leading cross-functional security initiatives, and providing subject matter expertise on enterprise security technologies, incident response, vulnerability management, or security governance.
Demonstrated experience using Azure security tools such as Defender for Cloud, Entra ID, and Key Vault.
Professional certifications and credentials in information security or information technology, such as CISSP, GSEC, CEH, CCE, ENCE, GSFI, ITIL, or a comparable industry-recognized credential.

Benefits

Paid vacation and sick leave
12 paid holidays each year
Low-cost medical, dental, vision, and prescription drug plans
6 weeks paid leave for parents of newborn or newly adopted children
Pension plan that provides income when you retire (after working at least three years)
Employer paid life insurance to provide support for your family in the event of death
Short-term and long-term disability insurance that can provide income if you are unable to work due to illness or injury
Tax-free expense accounts for health, dental, and dependent care
Resources that provide support and promote physical, emotional, social, and financial well-being
Training, classes, and professional development
Tuition reimbursement
Federal Public Service Loan Forgiveness Program (Some positions may qualify for the Public Service Loan Forgiveness Program.)
Employee Assistance Program (EAP) for work/life support

Telework Eligibility

Candidates living in Minnesota or within 50 miles of the worksite in a bordering state (Iowa, North Dakota, South Dakota, and Wisconsin) may telework up to 50%.
Minnesota residents living more than 50 miles from the worksite may be eligible to telework more than 50%.
Candidates living 50 miles or more from the worksite in a bordering state are not eligible for hire unless relocating within 50 miles.

Additional Requirements

A successful candidate must pass all legally required checks prior to employment, which may consist of: SEMA4 Records Check (for current and past state employees only), Criminal History Check, Reference Check, Social Security and Address Verification, Education Verification, CJIS Background Check, and other legally required checks.
Minnesota IT Services does not participate in the federal E-Verify program.
Minnesota IT Services is unable to sponsor applicants for work visas, including F-1 STEM OPT extensions, and cannot complete Form I-9 or any other documentation requiring employer participation in E-Verify.
All applicants must be legally authorized to work in the United States at the time of application.

Role Details

Location: St. Paul, MN (hybrid)
Salary: USD 40 - 69 per hourly
Minimum experience: 5 years

View full job page →

Security Governance Engineer Jobs

Lead Corporate Security Engineer

Principal Information Security Engineer

Get Security Governance Engineer Jobs alerts