Principal GRC Business Engineer
Core
Architect, execute, and mature global Governance, Risk, and Compliance (GRC) programs by bridging technical security engineering, enterprise risk management, and business operations.
Role type
Principal GRC Business Engineer
Builds
Global governance frameworks, scalable risk assessment methodologies, automated GRC platforms, and policy-as-code workflows.
Domain
Cybersecurity, Enterprise Risk Management, Regulatory Compliance
Required skills
GRC program architecture, enterprise risk management, regulatory framework translation, risk quantification, GRC platform configuration, multi-cloud architecture, policy-as-code, automated evidence collection, executive risk reporting, cross-functional stakeholder partnership
Preferred skills
AI governance frameworks (NIST AI RMF, ISO 42001), CCSP or CIPP certification
Technologies
AWS, Azure, GCP, GRC platforms, AI/ML tools
Responsibilities
Design and scale global GRC vision; Partner with senior leaders to align risk tolerance with business objectives; Lead drafting and review of security policies and standards; Translate regulatory frameworks into actionable requirements; Architect risk assessment methodologies for cloud/SaaS environments; Lead technical security risk evaluations; Design executive-level risk reporting; Implement and optimize GRC platforms; Design test plans for policy-as-code; Redesign manual processes into automated workflows.
Seniority
Principal, hands-on IC with strategic leadership
