Security Engineer, GRC
Core
Architect and build the engineering foundation for Security Governance, Risk, and Compliance (GRC), transforming manual compliance processes into continuous, automated, data-driven systems.
Role type
Principal Security GRC Engineer (Platform & Automation)
Builds
Automated GRC engineering platform, continuous controls monitoring systems, and data-driven risk dashboards.
Domain
Fintech / Cybersecurity / Compliance Engineering
Deliverable
production ML models | infrastructure | dashboards & analysis
Required skills
Python, SQL, AWS security controls, Infrastructure as Code (Terraform), Policy as Code (OPA/Rego), CI/CD integration, Data visualization (Mode), Risk assessment modeling, Automation engineering
Preferred skills
FedRAMP 20x experience, Audit automation platforms (Drata, Vanta), AI/LLM workflow integration, Security incident response
Technologies
Python, SQL, AWS, Terraform, OPA/Rego, Mode, GitHub, Claude, OpenAI
Responsibilities
Architect the GRC engineering foundation and codified source of truth for controls and policies; Build continuous controls monitoring and automated evidence collection; Create dashboards and SQL-driven reporting for real-time risk visibility; Conduct data-informed security risk assessments; Automate operational toil (vendor reviews, questionnaires, status reporting); Embed compliance checks into CI/CD and prototype AI-assisted workflows.
Seniority
Principal, hands-on IC with strategic direction
