GRC Security Engineer
Core
Senior GRC Security Engineer driving compliance programs, risk management, and third-party security reviews for a SaaS security product company.
Role type
Senior hands-on individual contributor GRC Security Engineer
Builds
Robust tooling and workflow engine to automate GRC activities at scale
Domain
Cybersecurity / Compliance / Risk Management
Deliverable
dashboards & analysis
Required skills
ISO 27001 program management, SOC 2 Type II maintenance, risk assessment and treatment, third-party security reviews, security awareness program leadership, stakeholder engagement, technical fluency for tool assessment, GRC automation
Preferred skills
Vanta or similar GRC platforms, AI governance, SaaS environment experience
Technologies
ISO 27001, SOC 2 Type II, Vanta, AI tools
Responsibilities
Drive day-to-day execution of ISO 27001 and SOC 2 Type II programs, run risk management processes and workshops, handle third-party security reviews and vendor assessments, lead security awareness training and phishing simulations, act as security partner for Legal, HR, Finance, and Business Operations, represent security during audits
Seniority
Senior, hands-on IC
