Sr. Security and Compliance Engineer

About the role

Qcells is looking for a hands-on senior security and compliance professional to lead cloud security, security operations, governance, risk, and compliance activities across the organization. The Sr. Security and Compliance Engineer will help safeguard IT assets by monitoring threats, responding to incidents, remediating risks, maintaining security technologies, and ensuring alignment with internal policies and applicable compliance frameworks. Hanwha Q CELLS America Inc. (“HQCA”) is a Qcells company, one of the world’s largest manufacturers and providers of solar photovoltaic (PV) products and solutions. Headquartered in Irvine, California, HQCA has been rapidly expanding its business in North America through the expansion of products and solutions, including distributed energy solutions, direct-to-homeowner solar sales and financing, and EPC services. We provide an opportunity to be part of an exciting and growing world-class global business in an interesting and expanding industry of the future. To comply with the Rehabilitation Act of 1973 the essential physical, mental and environmental requirements for this job are: Mobility – Standing 20% of time, Sitting 70% of time, Walking 10% of time; Strength – Pulling up to 10 Pounds, Pushing up to 10 Pounds, Carrying up to 10 Pounds, Lifting up to 10 Pounds; Dexterity (F = Frequently, O = Occasionally, N = Never) – Typing F, Handling F, Reaching F; Agility (F = Frequently, O = Occasionally, N = Never) – Turning F, Twisting F, Bending O, Crouching O, Balancing N, Climbing N, Crawling N, Kneeling N.

Responsibilities

• Develop and maintain the information security and compliance strategy, roadmap, policies, standards, and control framework.
• Lead and support continuous improvement projects to deploy, consolidate, enhance, and/or secure enterprise IT systems and services.
• Lead security and compliance operations, including threat detection, incident response, vulnerability remediation, forensics coordination, control monitoring, and compliance reporting.
• Ensure proper back up and disaster recovery are in place and proactively monitored to achieve service level agreements (SLAs) for Recovery Point Objective (RPO) and Recovery Time Objective (RTO).
• Ensure alignment with cybersecurity, privacy, technology control, and audit requirements, including FFIEC, SOX, SOC 2, ISO 27001, and other applicable obligations.
• Monitor and secure cloud environments (e.g., Azure, AWS, Salesforce) using security information and event management (SIEM) tools, and cloud-native security solutions.
• Investigate and respond to security incidents, ensuring proper containment, remediation, and documentation of root causes.
• Design and mature security and compliance controls for secure architecture, IAM, data handling, audit readiness, and risk management.
• Support Qcells NA’s ISMS through control evidence, risk treatment, audit readiness, corrective actions, and continuous improvement.
• Partner with IT, Legal, Privacy, vendors, and business teams on security requirements, policy exceptions, and compliance remediation