Commercial GRC Engineer - Sr. Security Engineer I

United StatesRemoteFull-time$145k2026-10-07 → 2026-11-10

Hybrid

Core

Automate control monitoring, build evidence pipelines, and reduce audit-season scramble for SOC 2, ISO, and HIPAA frameworks.

Role type

Senior GRC Engineer (Security)

Builds

Automated evidence collection and continuous control monitoring systems

Domain

Commercial compliance (GRC) + Cloud Security

Required skills

GRC engineering, compliance automation, cloud security (AWS/GCP/Azure IAM), control mapping, scripting (Python/JS), audit cycle ownership

Preferred skills

Hands-on GRC platform experience (Vanta/Drata/Secureframe), stakeholder-centric mindset, root cause analysis

Technologies

Python, JavaScript, AWS, GCP, Azure, SOC 2, ISO 27001, HIPAA

Responsibilities

Design automated evidence collection; Express controls as version-controlled code; Translate compliance requirements into technical logic; Shift compliance left in architecture reviews; Design engineer-facing compliance experiences; Evaluate controls for risk reduction; Support full audit cycles; Build compliance dashboards; Eliminate duplicate evidence efforts; Diagnose root causes of control failures

Seniority

Senior, hands-on IC

About Smartsheet

Smartsheet is an Equal Opportunity (EEO) employer committed to fostering an inclusive environment with the best employees. It is our policy to provide equal employment opportunities to all qualified applicants in accordance with applicable laws in the US, UK, Australia, Germany, Costa Rica, Japan, Bulgaria, India, and Singapore. All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information. 