Senior GRC Engineer

Job Summary

Owning the technical architecture of compliance management, the full-time salaried Senior GRC Engineer will design frameworks for multiple compliance standards, maintain a Master Control List, and manage the lifecycle of controls and evidence requirements in a remote work environment.

Key responsibilities

• Design and build control mappings across PCI DSS, SOC 1 Type II, ISO 27001, HITRUST, and NIST CSF/800-53 to streamline compliance efforts
• Own and maintain the Master Control List, including control nomenclature and operational models for ongoing management
• Drive evidence automation in GRC tooling and partner with cross-functional teams to ensure compliance requirements are effectively implemented

Required qualifications

• 6+ years of experience in security engineering, GRC, or compliance engineering with hands-on work in multiple regulatory frameworks
• Deep working knowledge of PCI DSS, SOC 1 or SOC 2, HITRUST, and at least one of ISO 27001 or NIST CSF/800-53
• Experience designing or maintaining control frameworks and managing evidence requirements
• Proficiency with compliance automation tooling such as Optro, Drata, or Vanta
• Experience building or operating AI workflows in a production context