Senior Security Engineer, GRC (Governance, Risk and Compliance)
Core
Senior Security Engineer leading Governance, Risk, and Compliance (GRC) initiatives as the second line of defense, aligning security with business objectives and managing risks.
Role type
Senior IC GRC Security Engineer
Builds
Security governance programs, risk management strategies, compliance frameworks, and automated control tests.
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC)
Required skills
GRC frameworks (ISO 27001, SOC 2, GDPR, PCI, SOX, NIST), security tool administration, audit engagement leadership, risk assessment, control test design, automation development, security program documentation.
Preferred skills
Big 4 consulting experience, CISSP/CISM/GIAC certifications, cloud environment expertise.
Technologies
GRC platforms, Vulnerability Scanners, SIEM, SOAR, AWS
Responsibilities
Lead internal and external audit engagements; oversee complex control tests and third-party risk assessments; develop issue and risk treatment plans; design and improve security control test activities; mature security governance, training, and awareness programs; design and implement GRC control automation.
Seniority
Senior, hands-on IC
