Senior Engineer, Cybersecurity Governance & Compliance
Core
Senior GRC Engineer interpreting cybersecurity frameworks and regulatory requirements to develop policies, assess risks, and advise stakeholders on governance practices.
Role type
Senior IC cybersecurity governance, risk, and compliance (GRC) engineer
Builds
Cybersecurity risk capabilities, control libraries, assessment workflows, and data-driven reporting
Domain
Cybersecurity, Risk Management, Compliance, Governance
Deliverable
dashboards & analysis
Required skills
Cybersecurity frameworks (NIST, ISO 27001, PCI DSS, SOX, SOC 2, CMMC), Risk assessment, Control design evaluation, Compliance gap analysis, Portfolio management, Data analytics, GRC platforms, Risk metrics development, Policy development, Stakeholder advisory
Preferred skills
Advanced education in cybersecurity/risk/compliance, AI/automation application, Financial governance, Vendor management, Roadmap planning
Technologies
NIST Cybersecurity Framework, NIST RMF, NIST SP 800-30, ISO 27001/27005, GRC platforms, AI tools
Responsibilities
Interpret frameworks and translate them into practical GRC practices; Develop and improve policies, standards, and control mappings; Analyze risks, gaps, and remediation plans; Coordinate control assessments and audit responses; Build and manage cybersecurity portfolio practices; Review budgets and resource plans; Define and communicate risk metrics for leadership; Advise stakeholders on GRC requirements and processes.
Seniority
Senior, hands-on IC with independent judgment