SecurityGeneral
Compliance
Also written as Regulatory Compliance, Audit Readiness
Ensuring a company's systems and practices meet legal or industry standards for data protection (e.g. SOC 2 for SaaS vendors, HIPAA for healthcare, GDPR for EU user data).
Think of it like
Like a restaurant passing a health inspector's checklist — it's not extra caution for its own sake, it's meeting specific rules regulators require.
Junior or senior?
Junior sounds like
Names a compliance framework without knowing what it actually required of them.
Senior sounds like
Can describe what a specific framework actually changed about how they built software.
Ask them
“What compliance framework did you work under, and what did that actually change about how you built software?”