SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Estuary is seeking a Senior Compliance Engineer to lead governance and compliance initiatives across their platform. This role sits at the intersection of security, compliance, and systems engineering—you'll own the design and execution of control frameworks, automate evidence collection, and maintain mature compliance programs.
Key responsibilities include deepening GDPR compliance across data processing records, lawful basis documentation, data processing agreements, sub-processor management, cross-border transfers, and data subject access requests. You'll lead PCI DSS attestation as a service provider, managing scope definition, gap remediation, and final attestation. You'll sustain SOC 2 and HIPAA programs through evidence collection, access reviews, control testing, and audit coordination. You'll maintain the risk register, conduct vendor and sub-processor assessments, coordinate penetration testing, and drive security awareness.
On the systems side, you'll run identity and access management (SSO/IdP, provisioning, MFA, least privilege, automated access reviews), manage the endpoints and SaaS estate (MDM, endpoint security, onboarding/offboarding, procurement, license hygiene), and automate evidence collection to keep controls continuously satisfied. You'll support enterprise customer diligence through questionnaires, audits, and trust center materials, maintain incident response and business continuity plans, and keep compliance scope current as the platform evolves.
The ideal candidate has 8+ years in compliance, GRC, or security governance with program ownership experience. You need SOC 2 depth and GDPR fluency, strong policy judgment, and hands-on experience with identity, device, and SaaS management. Systems thinking, engineering empathy, and clear communication are essential. Bonus experience includes PCI DSS, ISO 27001, data infrastructure context, compliance automation tools (Vanta, Drata, Secureframe), and public sector frameworks (FedRAMP, StateRAMP, NIST).
Estuary is a VC-backed company with a diverse, low-ego team culture. They offer competitive compensation, equity, and benefits with flexible remote work and high autonomy. Quarterly offsites bring the team together.
