Senior Tenable Compliance Engineer m f x

We are looking for an experienced cybersecurity specialist to join a project in the financial sector. You will support the migration of the Secure Configuration Baselines area from Tripwire to Tenable and design a scalable approach to managing compliance policies in a complex enterprise environment. This role offers the opportunity to shape global compliance standards covering operating systems, databases, middleware, and specialized environments. Your tasks: * Design and implementation of compliance policies and control models based on Tenable.sc Compliance Auditing * Support for the migration of Secure Configuration Baselines from the Tripwire platform to Tenable, considering best practices and security standards * Creation of scalable policy structures, rule inheritance mechanisms, exceptions, and baseline management * Definition of methods for automatic classification and assignment of assets to relevant compliance policies * Collaboration in the discovery, classification, and onboarding of databases and other critical infrastructure components * Design of compliance monitoring processes, scan scheduling, and results validation * Mapping of technical controls to frameworks such as CIS Benchmark, PCI DSS, NIST, ISO 27001, or DORA * Consulting on compliance monitoring for database environments, middleware, and specialized platforms Requirements: * Minimum 5 years of experience in cybersecurity, compliance monitoring, or security engineering * Practical experience working with Tenable.sc Compliance Auditing and configuration compliance monitoring solutions * Knowledge of migrating security policies and baselines between platforms, particularly from Tripwire to Tenable * Experience in managing compliance for Windows Server systems, Microsoft SQL Server databases, Oracle Database, and similar technologies * Ability to design asset classification models based on Active Directory, CMDB, cloud metadata, or other reference sources * Knowledge of security frameworks and regulations, such as CIS Benchmark, NIST, PCI DSS, ISO 27001, DORA, or FINMA * Familiarity with issues related to security policy exceptions, compensating controls, and risk acceptance * Very good command of English - min. B2