Senior Engineer, Information Security GRC
Core
Senior engineer responsible for global Information Security Governance, Risk, and Compliance (GRC), maintaining policies, assessing controls, and managing vulnerability programs to prevent security incidents and ensure regulatory compliance.
Role type
Senior IC GRC engineer
Builds
Corporate Information Security policies, control assessments, vulnerability management programs, and security awareness education.
Domain
Financial services / Cybersecurity GRC
Deliverable
dashboards & analysis
Required skills
Regulatory and framework compliance, risk assessment, security metrics reporting, policy maintenance, access review protocols, security awareness program management, technical writing, project management
Preferred skills
Systems administration, IP networking, exchange/trading facility experience, customer communication, vendor evaluation, senior management communication, advanced technical writing
Technologies
Excel, workflow automation tools, NIST Cyber Security Framework, CIS, GRC Platforms, scripting, regular expressions, SDLC
