Senior GRC Engineer

Job Summary

As a Senior GRC Engineer, this full-time salaried position will design and maintain a comprehensive control architecture across multiple compliance frameworks, manage the Master Control List, and drive automation in GRC tooling while working remotely.

Key responsibilities

• Design and build framework crosswalks and control mappings across PCI DSS, SOC 1 Type II, ISO 27001, HITRUST, and NIST CSF/800-53
• Own the Master Control List, including control nomenclature, database architecture, and ongoing maintenance
• Manage the full lifecycle of controls and evidence requirements as new standards are adopted or updated

Required qualifications

• 6+ years of experience in security engineering, GRC, or compliance engineering across multiple regulatory frameworks
• Deep working knowledge of PCI DSS, SOC 1 or SOC 2, HITRUST, and at least one of ISO 27001 or NIST CSF/800-53
• Experience designing or maintaining control frameworks or unified control architectures
• Proficiency with compliance automation tooling (e.g., Optro, Drata, Vanta)
• Experience building or operating agentic AI workflows in a production context