Security Engineer (GRC)

Job Summary

A company is looking for a Senior Security Engineer (GRC).

Key Responsibilities

• Develop and enforce organization-wide security policies, standards, and procedures
• Ensure audit readiness and compliance with regulatory changes
• Track and report on security controls and compliance activities

Required Qualifications

• 5+ years of experience in security engineering, governance, or risk management
• Solid understanding of AWS or other cloud vendors
• Strong knowledge of core information security concepts and regulatory frameworks (e.g., SOC2, ISO 27001, NIST CSF)
• Hands-on experience with risk assessment approaches and tools
• Experience drafting and updating security policies