Senior Cybersecurity Engineer - GRC Engineering & Technical Controls
Core
Design, implement, and operate technical control frameworks for enterprise cybersecurity risk management, regulatory compliance, and control assurance across cloud, connected vehicle, and OT environments.
Role type
Senior IC cybersecurity engineer (GRC engineering & technical controls)
Builds
Automated evidence collection workflows, Policy-as-Code guardrails, Continuous Control Monitoring (CCM) routines, and AI-driven GRC orchestration pipelines.
Domain
Automotive cybersecurity, cloud infrastructure, regulatory compliance (NIST, ISO, UN R155/R156)
Deliverable
production ML models
Required skills
Python, Go, PowerShell, Bash, AI agents, LLM APIs, Policy-as-Code, CI/CD, cloud infrastructure (AWS/Azure/GCP), IAM, vulnerability management, containerized deployments
Preferred skills
Compliance-as-Code, automated guardrails, configuration drift detection, automotive regulatory frameworks, advanced GRC platform architecture
Technologies
Python, Go, PowerShell, Bash, Git, AWS, Azure, GCP, NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, ISO/SAE 21434, UN R155/R156
Responsibilities
Architect data pipelines connecting GRC platforms with cloud environments and CI/CD pipelines; Develop custom connectors and automation scripts for evidence gathering; Standardize security policies into machine-readable formats using policy engines; Define and configure automated verification routines for real-time control monitoring; Develop AI-driven workflows to automate risk assessments and compliance scorecards; Interpret global regulations and translate them into actionable technical control standards; Maintain bidirectional traceability within a Unified Controls Framework; Serve as technical administrator for the enterprise GRC/IRM platform; Establish automated compliance telemetry dashboards
Seniority
Senior, hands-on IC
