Technology Compliance Engineer, Implementation & Security

Thomson Reuters is a leading provider of trusted content and technology for professionals across various sectors. The Technology Compliance Engineer will manage technical projects related to security compliance and work collaboratively with multiple stakeholders to ensure adherence to technology standards and contractual obligations.

Responsibilities:

• Work with cross-functional technical projects from initiation through delivery, as well as with existing customers
• Coordinate with multiple stakeholders, including Thomson Reuters’ Service Delivery/Operations, Product Technology, business, and customers
• Leverage tooling (e.g., Azure Monitor, Log Analytics) to provide service delivery tracking and ongoing reporting based on customer SLAs
• Manage audit reviews of environment setup and configuration to ensure they meet technology standards, contractual obligations, and monitoring requirements
• Partner across various teams to manage and track troubleshooting, incident fixes, client-reported issues, and actively monitor and communicate progress internally and with external customers
• Manage recurring testing and validation of disaster recovery, business continuity plan, and penetration testing
• Monitor cloud costs across customer and internal environments
• Research and provide recommendations for cost optimizations and efficiencies
• Support, track, and manage security compliance (currently SOC2 type 2, ISO 27001, Cyber Essentials, Cyber Essentials Plus, and PCI SAQ-D) and required processes for certifications
• Keep current and comply with TR corporate security policies (cloud, data, etc.) as well as industry trends
• Provide technical knowledge and support for customer inquiries, sales engagement (e.g., RFP responses), and contracting teams
• Must be willing and able to pass customer-required background screening and security checks/tests (e.g., CJIS and/or UK SC Level Security Check, criminal background check, identity verification)
• Travel required as needed (10%)
• The above duties are typical of those required for this position. This list is not to be construed as all-inclusive. Other duties may be required or assigned

Requirements:

• Bachelor's Degree in a related field
• 5+ years of Technical Project Management experience
• 3+ years of experience with security compliance
• Ability to interact professionally with a diverse group, including executives, managers, subject matter experts, and external customers
• Knowledge of Microsoft Azure (or equivalent) cloud platform and understanding of infrastructure components and services such as application gateways, web application firewalls, service bus, and storage accounts
• Knowledge of monitoring and security tools such as Azure Monitor, Log Analytics, Defender, and Network Watcher
• Familiarity with and ability to understand, manage, and enforce security policies (e.g., SOC2 type 2, ISP 27001, PCI)
• Highly organized with planning, problem-solving, troubleshooting, prioritization, time management, risk management, escalation, and analytical skills
• Responsible and motivated with the ability to work well in a fast-paced environment in an independent manner
• Ability to work effectively under pressure in a demanding environment
• Possess the ability to communicate complex information clearly and concisely, along with excellent written and verbal communication skills
• Must be willing and able to pass customer-required background screening and security checks/tests (e.g., CJIS and/or UK SC Level Security Check, criminal background check, identity verification)
• Travel required as needed (10%)