GRC Engineer
Core
Develop, implement, and continuously improve information security governance, risk management, compliance, and assurance processes while leveraging AI and automation.
Role type
Senior GRC Engineer (hands-on IC)
Builds
Scalable and efficient GRC processes, security policies, and compliance frameworks
Domain
Information Security, Risk Management, Compliance
Deliverable
production ML models
Required skills
GRC frameworks (ISO 27001, SOC 2), Risk Assessment, BCM/DR planning, Incident Response, Third-Party Risk Management, Secure SDLC assessment, Cloud infrastructure concepts, AI/automation tools, Audit support
Preferred skills
GRC platforms (Vanta, Drata), Policy-as-Code, Cloud environments (AWS, OCI, GCP), IaC, CI/CD, Additional frameworks (ISO 22301, NIST CSF), Security certifications
Technologies
AI, APIs, LLMs, Vanta, Drata, AWS, OCI, GCP
Responsibilities
Develop and maintain security policies and governance documentation; Conduct risk assessments and maintain risk registers; Support internal and external audits and evidence collection; Improve BCM, DR, and IR activities; Assess secure software development practices; Conduct customer security due diligence; Identify and implement opportunities to automate GRC processes using AI.
Seniority
Senior, hands-on IC
