GRC Engineer
Core
Own day-to-day GRC operations including risk assessments, continuous compliance programs, automated control monitoring, and third-party security reviews.
Role type
Senior GRC Engineer (Security & Compliance)
Builds
Automated control monitoring systems, continuous compliance workflows, and scalable GRC platforms.
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC) for Physical AI and Automotive industries.
Required skills
Security GRC program ownership, Risk assessment and management, Third-party risk management, GRC platform administration (Vanta, Anecdotes, Drata, OneTrust), Security frameworks (ISO 42001, NIST AI RMF, ISO 27001, SOC 2), Security automation and scripting, Policy and standards development.
Preferred skills
Software engineering background for automation, Security metrics/KPIs definition, Customer security questionnaires, Automotive security standards (ISO 21434, ISO 26262).
Technologies
Vanta, Anecdotes, Drata, OneTrust, ISO 42001, NIST AI RMF, ISO 27001, TISAX, SOC 2, NIST CSF, ISO 21434, ISO 26262.
Responsibilities
Perform and improve security risk assessments and maintain the risk register, Own the third-party risk management lifecycle from intake to remediation, Establish automated control monitoring systems for real-time audit readiness, Administer GRC platforms with a focus on automation and scalability, Maintain and update security policies and standards aligned with industry best practices.
Seniority
Senior, hands-on IC