GRC Security Engineer
Core
Own ISO 27001 and PCI DSS compliance programmes, lead client and government assurance work, and set security policies.
Role type
GRC Security Engineer
Builds
Continuous compliance evidence and security governance frameworks
Domain
Cybersecurity / Compliance
Deliverable
dashboards & analysis
Required skills
ISO 27001 ISMS management, PCI DSS v4 assessment, risk register management, security policy drafting, third-party risk assessment, AI governance, evidence automation, security awareness training
Preferred skills
ISO 27001 Lead Implementer or Lead Auditor certification, CISA certification, NZISM experience
Technologies
Compliance tooling, cloud configuration readers
Responsibilities
Run the ISMS including internal audits and management reviews, lead government assurance work, draft and maintain security policies, automate evidence collection, run third-party risk reviews, manage client security questionnaires and trust packs
Seniority
Mid-level, hands-on IC
