CareerPlan

Senior Security Engineer, GRC (Governance, Risk and Compliance)

Remote · Everywhere | RomaniaRemoteFull-time$98k–$144k2026-11-08 → 2026-11-09
RemoteNo visa sponsorship

Core

Senior Security Engineer leading Governance, Risk, and Compliance (GRC) initiatives as the second line of defense, aligning security with business objectives and managing risks.

Role type

Senior IC GRC Security Engineer

Builds

Security governance programs, risk management strategies, compliance frameworks, and automated control tests.

Domain

Cybersecurity, Governance, Risk, and Compliance (GRC)

Required skills

GRC frameworks (ISO 27001, SOC 2, GDPR, PCI, SOX, NIST), security tool administration, audit engagement leadership, risk assessment, control test design, automation development, security program documentation.

Preferred skills

Big 4 consulting experience, CISSP/CISM/GIAC certifications, cloud environment expertise.

Technologies

GRC platforms, Vulnerability Scanners, SIEM, SOAR, AWS

Responsibilities

Lead internal and external audit engagements; oversee complex control tests and third-party risk assessments; develop issue and risk treatment plans; design and improve security control test activities; mature security governance, training, and awareness programs; design and implement GRC control automation.

Seniority

Senior, hands-on IC