Senior GRC Engineer

Job Summary

As a Senior GRC Engineer, this full-time position will manage the technical architecture of compliance frameworks at Playlist, focusing on building and maintaining the Master Control List and ensuring control designs align with regulatory changes and business growth.

Key responsibilities

• Design and build framework crosswalks and control mappings across multiple compliance standards, utilizing languages like OSCAL
• Own the Master Control List, including control nomenclature and relational database architecture, ensuring ongoing maintenance across the multi-brand footprint
• Drive evidence automation in GRC tooling and manage the full lifecycle of controls and evidence requirements as new standards are adopted

Required qualifications

• 6+ years of experience in security engineering, GRC, or compliance engineering with hands-on work across multiple regulatory frameworks
• Deep working knowledge of PCI DSS, SOC 1 or SOC 2, HITRUST, and at least one of ISO 27001 or NIST CSF/800-53
• Experience designing or maintaining control frameworks and managing evidence requirements and control implementation
• Proficiency with compliance automation tooling such as Optro, Drata, or Vanta
• Experience building or operating agentic AI workflows in a production context