RegScale is a purpose-built cyber GRC platform designed to enable the CISO to track and monitor security controls. We help organizations break out of the slow and expensive realities that plague legacy GRC tools by bridging security, risk, and compliance through controls lifecycle management. By leveraging RegScale’s Continuous Control Monitoring (CCM) instrumentation, organizations experience massive compliance process improvements like 90% faster certification times, and 60% less audit prep time. Today's expansive security and compliance requirements can only be met with a modern, CCM-based approach, and RegScale is the market leader in that space.
Role Overview:
We are seeking a Principal Product Engineer & Solution Owner to lead the technical direction, architecture, and implementation of a critical product capability within the RegScale platform. This hybrid role blends deep hands-on engineering with product strategy, solution design, and cross-functional leadership.
If you love being in the code while also shaping the “what” and “why” behind the solution, this is the role for you. You will own a major functional area end-to-end—guiding technical decisions, partnering closely with Product, and ensuring high-quality delivery by the engineering team.
What You’ll Do
Technical Leadership
- Architect, design, and implement complex backend and/or full-stack features using modern frameworks and cloud technologies.
- Provide technical direction, code reviews, and mentorship to developers across multiple teams.
- Define and uphold engineering standards around scalability, performance, security, and maintainability.
- Troubleshoot complex issues across systems, environments, and integrations.
- Lead technical discovery, proof-of-concepts, and build-versus-buy evaluations.
- Partner with DevOps to ensure reliable deployments, monitoring, and operational excellence.
Product, Strategy & Design
- Act as the Solution Owner for a key product capability, shaping the long-term vision and roadmap.
- Translate customer needs, regulatory requirements, and business goals into clear technical plans.
- Work closely with Product Management to define requirements, acceptance criteria, and success metrics.
- Collaborate with Design to ensure solutions are intuitive, user-friendly, and aligned with RegScale’s platform UX patterns.
- Participate in customer calls to gather feedback, validate direction, and evangelize technical decisions.
What You Bring
- 10+ years of software engineering experience, with at least 3+ years in a senior/principal role.
- Expertise in modern cloud-native architectures (Azure/AWS), microservices, APIs, and event-driven systems.
- Strong proficiency in one or more of: C#/.NET, Python, Angular or similar enterprise languages.
- Demonstrated experience owning major product components or platforms end-to-end.
- Ability to lead teams through influence—setting direction without relying on hierarchy.
- Strong communication skills and comfort engaging with Product, Design, and customers.
- Experience in security, compliance, GRC, or regulated industries is a plus.
Why Join RegScale?
- Build category-defining technology in one of the fastest-growing areas of cybersecurity.
- Own solutions that meaningfully impact enterprise and federal compliance automation.
- Work in a fast-paced startup environment where your decisions directly shape the product.
- Competitive compensation, equity, benefits, and flexible remote work culture.
Top Skills
What We Do
RegScale overcomes speed, timeliness, and cost effectiveness limitations in legacy GRC by bridging security, risk, and compliance through our Continuous Controls Monitoring platform.
Our CCM pipeline of automation, dashboards, and AI tools deliver lower program costs, strengthen security, and minimize painful handoffs between teams. Achieve rapid certification for faster market entry, anticipate threats via proactive risk management, and automate evidence collection, access reviews, and controls mapping. Improve the Return on
Investment (ROI) of existing tools by seamlessly exchanging data with our centralized CCM data lake, enabling continuous monitoring of security, risk, and compliance controls. Heavily regulated organizations, including Fortune 500 enterprises – both financial institutions and other sectors – as well as the government and entities that serve them, use RegScale to enhance stakeholder trust, lower costs, adapt to evolving risks, and start and stay compliant. Our customers report a 90% faster path to compliance certifications and a 60% reduction in audit preparation efforts, strengthening security programs and reducing costs. For more information, visit www.regscale.com
