Senior GRC Engineer

Job Summary

A company is looking for a Senior GRC Engineer to build and scale an engineering-driven, automation-first, and AI-enabled approach to Governance, Risk, and Compliance (GRC).

Key Responsibilities

• Design and implement policy-as-code and compliance-as-code frameworks
• Develop automated risk scoring and prioritization models using real-time engineering and security data
• Lead and support audits including SOC 2, ISO 27001, and other compliance certifications

Required Qualifications

• 5+ years in GRC, security engineering, or related roles
• Experience working in cloud-native environments, particularly AWS
• Experience supporting audits such as SOC 2 or ISO 27001
• Relevant certifications such as CISA, CRISC, or AWS Security Specialty are a plus
• Strong understanding of frameworks such as SOC2 Type II and NIST 800-53