Staff Security Engineer

Mozilla
Germany
Workplace: RemoteFull timeEUR 81,000 - 108,000 annuallyFunction: CybersecurityExperience: 5+ yearsSkills: ["Cross-functional collaboration","Written and verbal communication","Independence","Process building","Stakeholder management"]

Own and mature Mozilla’s Information Security Management System (ISMS), including Statement of Applicability, risk treatment plans, and Management Review Meetings. Support ISO 27001 and SOC 2 Type 2 audit execution by preparing scope, evidence, and narrative artifacts and driving resolution of audit findings. Maintain audit documentation such as SOC 2 system descriptions, lead the security policy program, and partner across Engineering, IT, Legal, Privacy, People, and product leadership to translate compliance needs into practical, adoptable workflows.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Mozilla
Mozilla
1 day ago

Staff Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 7 hours agoStatus: Live

Job Summary

Own and mature Mozilla’s Information Security Management System (ISMS), including Statement of Applicability, risk treatment plans, and Management Review Meetings. Support ISO 27001 and SOC 2 Type 2 audit execution by preparing scope, evidence, and narrative artifacts and driving resolution of audit findings. Maintain audit documentation such as SOC 2 system descriptions, lead the security policy program, and partner across Engineering, IT, Legal, Privacy, People, and product leadership to translate compliance needs into practical, adoptable workflows.
Location: Germany
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Maintain and mature the ISMS, including SoA, risk treatment plans, and Management Review Meeting cadence.
  • •Support ISO 27001 and SOC 2 Type 2 audit execution, including preparing evidence/narratives, participating in auditor walkthroughs and interviews, and resolving findings.
  • •Contribute to SOC 2 System Description and other audit narrative documentation to ensure alignment with the control environment.
  • •Track readiness and audit gaps and drive remediation efforts.
  • •Lead the policy program by creating, revising, and managing cross-functional policy review cycles to keep the set current and audit-ready.

Pay and Benefits

Salary: EUR 81,000 - 108,000 annually
Perks:Health InsuranceDentalVisionHome OfficeLearning BudgetWellness StipendPaid ParentalAnnual Bonus

Key Requirements

  • •5+ years of experience in information security, GRC, or compliance-focused roles.
  • •Hands-on familiarity with ISO 27001 and SOC 2 Trust Services Criteria, including audit involvement from readiness through certification.
  • •Ability to operate across the ISMS lifecycle, including Statement of Applicability maintenance, Management Review Meetings, and System Description authorship.
  • •Experience writing and revising security policies and running cross-functional review cycles to drive organization-wide adoption.
  • •Demonstrated ability to track gaps and remediation plans and connect them to broader compliance and risk programs.
Experience:5+ yearsInformation securityGRCCompliance
Skills:Cross-functional collaborationWritten and verbal communicationIndependenceProcess buildingStakeholder management
Certifications:CISACISSPISO 27001 Lead AuditorISO 27001 Implementer
Languages:English
Tech Stack:ISO 27001SOC 2SOC 2 Type 2Trust Services CriteriaISMSStatement of Applicability (SoA)Management Review MeetingsSystem Description

Company Brief

Mozilla
Mozilla is a mission-driven organization that builds open-source internet products (notably the Firefox browser) and advocates for an open, private, and secure web through software, research, and community programs.
Industry: Enterprise Software
Company Size: Large (251 to 1,000 employees)
Growth: Nonprofit & NGO
Headquarters: San Francisco, United States
Founded: 1998
Glassdoor
Glassdoor: 2.9
WebsiteLinkedInGlassdoor