Security GRC Engineer
Core
Develop, implement, and maintain security policies and procedures to support compliance frameworks (PCI DSS, ISO 27001, NIS2, GDPR) and drive risk assessment and remediation.
Role type
Senior GRC Engineer (Security)
Builds
Security policies, risk registers, compliance documentation, and security awareness programs.
Domain
Cybersecurity / Regulatory Compliance
Required skills
Security control frameworks (NIST, PCI DSS, ISO 27001, NIS2), GRC platforms (RSA Archer, SAP GRC, ServiceNow, OneTrust), risk quantification (FAIR), cloud compliance (AWS, Azure, GCP), security awareness program design, audit coordination, contract security review.
Preferred skills
Python for automation, Business Continuity and Disaster Recovery planning, EU AI Act knowledge.
Technologies
RSA Archer, SAP GRC, StandardFusion, ServiceNow, OneTrust, AWS, Azure, GCP, NIST, PCI DSS, ISO 27001, NIS2, GDPR, FAIR, Cloud Controls Matrix (CCM), NIST AI RMF, MITRE ATLAS.
Responsibilities
Develop and maintain security policies aligned with compliance frameworks; execute security awareness programs; conduct risk assessments and maintain risk registers; coordinate internal and external audits; respond to customer security inquiries and due diligence; propose tools for continuous security monitoring; assist with security certification processes.
Seniority
Senior, hands-on IC
