GRC Engineer
Core
Build and lead the GRCA (Governance, Risk, Compliance, Assurance) function to manage risks, scale compliance, and curate security information for customers.
Role type
Senior GRC Engineer (Security & Compliance)
Builds
Scalable, automated security compliance programs and tooling for continuous monitoring.
Domain
Cybersecurity, Cloud Infrastructure, Enterprise Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Security controls implementation, AWS cloud services, Audit management (SOC 2, ISO27001), Risk assessment, Vendor security assessments, Corrective action planning, Business Impact Assessments (BIA), BCP/DR activities, Security exception management, Customer questionnaire support, Automation of audit evidence collection
Preferred skills
Scripting languages (Python, JSON), AI/automation for GRC functions
Technologies
AWS, Github, Python, JSON
Responsibilities
Research, build, and maintain tooling for testing and continuous monitoring of security controls; Maintain the roadmap for continuous security compliance; Develop and maintain company-wide security policies and procedures; Perform annual security risk assessments and prepare risk treatment plans; Conduct vendor security assessments; Manage the Security Exception Process; Maintain the FAQ for customer questionnaires; Collaborate on Business Impact Assessments (BIA) and annual BCP/DR activities; Work closely with internal and external auditors.
Seniority
Senior, hands-on IC