Staff Security Engineer (Compliance) - Moveworks at ServiceNow
Mountain View, CA
—
Aug 3, 2026
Mountain View, CA
Sep 24, 2026
What this job asks for AI summary
This IC tech lead role is responsible for replacing manual security compliance processes with automated, continuously running systems — covering evidence collection pipelines, real-time control monitoring, and auditor-facing technical engagements for certifications such as ISO 27001, SOC 2 Type 2, and ISO 42001. The ideal candidate combines deep security compliance expertise with hands-on software engineering instincts and comfort applying AI/LLMs to automate compliance workflows at scale.
Senior level · 8+ years · San Francisco-Oakland-Berkeley, CA · Bachelor's required · Full-time
“or” means any one of them counts — you don't need all of them.
Posted 2 times — it's one opening, so apply once.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 15 people in the San Francisco-Oakland-Berkeley, CA area plausibly meet what this posting asks for (information security analysts). range 6–20
Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $165,879 (middle half $117,529–$206,125).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Aug 5, 2026. It is a model, not a headcount.
Why we read it this way (7)
US Citizenship is explicitly required — not merely the ability to obtain a clearance, but citizenship itself as a hard gate, likely tied to export control obligations noted at the end of the posting.
The role sits at the intersection of security compliance and software engineering; the SOC classification is Medium-confidence because the posting equally emphasizes building automation pipelines (15-1252) and owning compliance frameworks and auditor relationships (15-1212). The primary framing leans toward compliance analysis and strategy, so 15-1212 was chosen.
AWS is listed as a hard requirement ('Expertise with AWS services') while Azure and GCP appear only under 'familiarity with cloud provider compliance standards' — a softer framing — and are marked preferred accordingly.
Advanced certifications (CISM, CISSP, CISA) are explicitly described as preferred, not required.
The posting does not specify a work location beyond referencing ServiceNow's distributed work personas; the CBSA is inferred from Moveworks' known headquarters in Mountain View/San Francisco Bay Area. Remote eligibility is unclear from the posting text — remote=false is a conservative default given the 'required in office' persona possibility mentioned.
No compensation figures are provided in the posting.
Ignored 1 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): SOC 2 Type 2.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.