Senior GRC Engineer
Core
Building the technical backbone for Governance, Risk, and Compliance (GRC) to enable continuous monitoring and 'compliance by design' rather than point-in-time audits.
Role type
Senior GRC Engineer (Security & Compliance)
Builds
Automated control implementation, continuous monitoring workflows, and cross-framework control crosswalks.
Domain
Cloud Security, Regulatory Compliance, GRC Engineering
Required skills
Security engineering, GRC frameworks (ISO 27001/27017/27018/27701/42001, SOC 1/2, Cyber Essentials), cross-framework control mapping, scripting (Python/Bash), GRC platform proficiency (Drata/Vanta/Archer/OneTrust/ServiceNow), system/data-flow diagramming, translating compliance requirements to engineering guidance.
Preferred skills
AI/LLM tooling for operational workflows, OSCAL, quantitative risk scoring (FAIR), FedRAMP/HIPAA/HITRUST experience, external audit support.
Technologies
Python, Bash, Drata, Vanta, Hyperproof, Archer, OneTrust, ServiceNow GRC, ISO 27001, SOC 1/2, Cyber Essentials, ENS, TX-RAMP, OSCAL, FAIR.
Responsibilities
Act as a technical GRC partner to engineering and non-technical teams; identify synergies across regulatory requirements to reduce duplicate effort; support customer-facing security conversations; build processes and tooling to embed controls into daily operations; create documentation explaining the reasoning behind controls; partner with Risk Management to engineer continuous monitoring.
Seniority
Senior, hands-on IC
