Security GRC Engineer
Core
Security GRC Engineer strengthening global security posture, navigating regulatory environments, and bridging technical engineering, legal, and business stakeholders.
Role type
Senior IC Security GRC Engineer
Builds
Robust security controls, compliance frameworks, security awareness programs, and risk mitigation strategies.
Domain
Cybersecurity, Regulatory Compliance, Risk Management
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Security control frameworks (NIST, PCI DSS, GDPR, ISO 27001, NIS2), GRC platforms (RSA Archer, SAP GRC, StandardFusion, ServiceNow, OneTrust), Risk quantification (FAIR), Cloud compliance (AWS, Azure, GCP, CCM), Security awareness program design, Contract security review, Audit coordination
Preferred skills
Python automation, Business Continuity/Disaster Recovery planning, EU AI Act knowledge, NIST AI RMF, MITRE ATLAS
Technologies
RSA Archer, SAP GRC, StandardFusion, ServiceNow, OneTrust, AWS, Azure, GCP, NIST, PCI DSS, ISO 27001, NIS2, GDPR, FAIR, CCM
Responsibilities
Develop and maintain security policies aligned with compliance frameworks; Execute security awareness programs; Conduct risk assessments and manage remediation plans; Coordinate security due diligence and contract modifications; Implement continuous security monitoring processes; Support internal and external audits; Liaise between technical, legal, and business teams.
Seniority
Senior, hands-on IC
