Senior Security GRC Engineer
Core
Operate the security control framework to maintain ISO 27001, SOC 2, DORA, and GDPR certifications and regulatory compliance for a fintech payment solution.
Role type
Senior GRC Engineer (Compliance & Risk Operations)
Builds
Automated evidence collection workflows and control monitoring systems
Domain
Financial Services / Cybersecurity Compliance
Required skills
ISO 27001 cycle management, SOC 2 Type II readiness, risk assessment (ISO 27005), Python scripting for automation, API integration, stakeholder management, audit coordination
Preferred skills
DORA regulation knowledge, GDPR data protection, ISO 42001/AI governance, GRC platform experience (CISO-Assistant), cloud security (AWS), identity management (Okta), agile methodologies
Technologies
Jira, CISO-Assistant, Okta, AWS, Slack, Confluence, Python
Responsibilities
Own the control calendar for recurring reviews and tests, maintain assets and risks in CISO-Assistant, conduct risk assessments and vendor security assessments, support sales with security questionnaires, automate evidence collection and reporting, coordinate with auditors and manage findings
Seniority
Senior, hands-on IC