GRC Engineer
Core
Build and lead the GRCA (Governance, Risk, and Compliance Assurance) function to manage risks, scale compliance, and maintain customer trust for a global AI-powered physical security platform.
Role type
Senior GRC Engineer (Security & Compliance)
Builds
Automated security compliance programs, risk assessments, and vendor security evaluations for a cloud-based physical security platform.
Domain
Cybersecurity, Cloud Infrastructure, Regulatory Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Security controls implementation, Cloud security (AWS), Audit management (SOC 2, ISO27001), Risk assessment, Vendor security assessments, Compliance policy development, Stakeholder communication, Corrective action planning, Business Impact Analysis (BIA), Disaster Recovery (BCP/DR), Security exception management, Continuous monitoring tooling
Preferred skills
Scripting (Python, JSON), Audit evidence automation, AI/automation for GRC functions
Technologies
AWS, Github, Python, JSON
Responsibilities
Work cross-functionally with Security, IT, Engineering, Product, and Legal to implement security controls; Research, build, and maintain tooling for testing and continuous monitoring of security controls; Maintain the roadmap for continuous security compliance across Corporate, IT, and Product environments; Assist in developing and maintaining company-wide security policies, procedures, and plans; Create procedural documentation and training materials; Implement corrective action plans for security compliance issues; Perform annual security risk assessments and prepare risk treatment plans; Conduct vendor security assessments; Manage the Security Exception Process; Maintain FAQs for customer questionnaires; Collaborate on Business Impact Assessments (BIA) and annual BCP/DR activities; Work with internal and external auditors to achieve continuous compliance.
Seniority
Senior, hands-on IC
