Senior Security GRC Engineer
Core
Define, develop, and implement a Governance, Risk, and Compliance framework for Enterprise and Product verticals, aligning security, privacy, regulatory, and risk management initiatives.
Role type
Senior GRC Engineer (early-career professional)
Builds
Integrated GRC framework, risk registers, audit documentation, and security program standards
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC)
Required skills
Risk assessment, GRC frameworks (SOC 2, ISO 27001, NIST), GRC platform administration, audit coordination, third-party risk management, vulnerability management, BC/DR support, scripting/automation
Preferred skills
Security+ / CISA / CISM / CISSP certification, Python / SQL, penetration testing coordination
Responsibilities
Perform risk assessments and maintain risk registers; Coordinate evidence collection and prepare stakeholders for audits; Support SSDLC governance and data classification; Track vulnerability metrics and remediation; Administer GRC platform workflows and automate processes
Seniority
Senior, hands-on IC