GRC Engineer

Job Summary

To support GRC initiatives, the full-time remote GRC Engineer will manage continuous control monitoring, application testing, and risk evaluation while validating security and compliance controls.

Key Responsibilities

• Build and maintain processes for testing and monitoring security, technology, and application controls
• Retrieve and validate technical evidence for audits and assessments, ensuring accuracy and completeness
• Support GRC initiatives across risk management, business continuity, and regulatory compliance

Required Qualifications

• 4+ years of relevant experience in IT audit, GRC, or information security
• Hands-on experience with technical security controls and audits such as SOC 2 or SOX/ITGC
• Strong understanding of security control domains including identity and access management and cloud security
• Ability to independently retrieve and validate technical evidence from systems
• Working knowledge of SQL, KQL, or PowerShell for data querying and analysis