Staff Security Engineer

Mozilla
Canada
Workplace: RemoteFull timeCAD 116,000 - 171,000 annuallyFunction: CybersecuritySkills: ["Cross-functional collaboration","Independent execution","Written communication","Verbal communication","Stakeholder management"]

Own Mozilla’s Information Security Management System (ISMS) and help mature governance processes across policies and controls. Drive ISO 27001 and SOC 2 Type 2 readiness, supporting audit scope, evidence preparation, narrative documentation, auditor interviews, and remediation tracking. Lead security policy program cycles and partner with Engineering, IT, Legal, Privacy, People, and product leadership to translate compliance requirements into practical, adoptable workflows. Advise Security leadership on audit risk and certification readiness.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Mozilla
Mozilla
1 day ago

Staff Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 7 hours agoStatus: Live
Reposted: similar role first listed 5 months ago

Job Summary

Own Mozilla’s Information Security Management System (ISMS) and help mature governance processes across policies and controls. Drive ISO 27001 and SOC 2 Type 2 readiness, supporting audit scope, evidence preparation, narrative documentation, auditor interviews, and remediation tracking. Lead security policy program cycles and partner with Engineering, IT, Legal, Privacy, People, and product leadership to translate compliance requirements into practical, adoptable workflows. Advise Security leadership on audit risk and certification readiness.
Location: Canada
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity

Key Responsibilities

  • •Maintain and mature Mozilla’s ISMS, including SoA, risk treatment plans, and Management Review Meeting cadence.
  • •Support ISO 27001 and SOC 2 Type 2 audit execution by determining scope, preparing evidence and narratives, participating in auditor walkthroughs/interviews, and resolving findings.
  • •Develop and maintain SOC 2 System Description and other audit-specific narrative documentation to accurately reflect the control environment.
  • •Track readiness assessment and audit gaps, coordinate remediation efforts, and connect work to the broader compliance and risk program.
  • •Lead the policy program by driving creation, revision, and cross-functional review cycles to keep the security policy set current, enforceable, and audit-ready.

Pay and Benefits

Salary: CAD 116,000 - 171,000 annually
Perks:Health InsuranceDentalVisionRetirementPaid ParentalHome OfficeLearning BudgetWellness StipendPaid Leave

Key Requirements

  • •5 years of experience in information security, GRC, or compliance-focused roles.
  • •Strong hands-on familiarity with ISO 27001 and SOC 2 Trust Services Criteria gained through involvement in audits from readiness through certification.
  • •Ability to work across the ISMS lifecycle, including Statement of Applicability (SoA) maintenance, Management Review Meetings, and System Description authorship.
  • •Experience writing and revising security policies and running cross-functional review cycles to build organization-wide buy-in.
  • •Comfort building processes where none exist and operating independently while collaborating effectively across teams and external auditors.
Experience:Information securityGRCComplianceOpen source
Skills:Cross-functional collaborationIndependent executionWritten communicationVerbal communicationStakeholder management
Certifications:CISACISSPISO 27001 Lead AuditorISO 27001 Implementer
Tech Stack:ISMSStatement of Applicability (SoA)ISO 27001SOC 2 Type 2SOC 2 Trust Services CriteriaManagement Review MeetingsSystem Description

Company Brief

Mozilla
Mozilla is a mission-driven organization that builds open-source internet products (notably the Firefox browser) and advocates for an open, private, and secure web through software, research, and community programs.
Industry: Enterprise Software
Company Size: Large (251 to 1,000 employees)
Growth: Nonprofit & NGO
Headquarters: San Francisco, United States
Founded: 1998
Glassdoor
Glassdoor: 2.9
WebsiteLinkedInGlassdoor