GRC Staff Engineer
Hybrid
Core
Build a security data lake and automate continuous control monitoring (CCM) to replace manual compliance testing with code-driven checks.
Role type
Staff GRC Engineer (Security)
Builds
Security data lake, automated evidence collection, continuous control monitoring (CCM), policy-as-code checks
Domain
Information Security / GRC / Cloud Infrastructure
Required skills
GRC, security engineering, data engineering, control testing, SQL, Python, modern data stack, cloud security controls, audit frameworks
Preferred skills
External audit experience, CISA, CISSP, AWS, SANS GIAC
Technologies
AWS, GCP, Azure, Kubernetes, Secureframe, Wiz, GitHub
Responsibilities
Build and govern a security data lake; implement compliance-as-code; integrate GRC tooling via APIs/scripts; support certifications (ISO, SOC 2, PCI DSS, HITRUST)
Seniority
Staff, hands-on IC
