Lead Security Engineer - GRC
Core
Lead security gap assessment, third-party risk management (TPRM), and human-risk programs while building automation/AI tools for security evaluation.
Role type
Senior IC GRC security engineer (TPRM & automation)
Builds
Automated security assessment capabilities, TPRM dashboards, and risk mitigation plans
Domain
Financial services / Cybersecurity / Third-party risk management
Deliverable
production ML models
Required skills
Third-party risk management, Security controls design, Risk assessment (qualitative/quantitative), Cloud security (AWS/GCP/Azure), Security automation & scripting, AI/LLM tooling, Executive communication, Process improvement
Preferred skills
Generative-AI risk assessment, Fintech experience, Spanish language, CISA/CISM/CISSP certification, ISO/NIST framework expertise
Technologies
AWS, GCP, Azure, NIST CSF, NIST SP 800-30, ISO 27001, ISO 27002, ISO 27005, ISO 31000, PCI-DSS, ITIL, COBIT
Responsibilities
Assess security gaps across business processes, technologies and third parties; Lead the TPRM program across onboarding, continuous monitoring, offboarding and fourth-party visibility; Build automation and AI-assisted assessment capabilities; Drive phishing simulations, training, communications and other human-risk programs; Act as the squad's technical lead, mentor engineers and analysts, and drive process improvement
Seniority
Senior, hands-on IC
