Senior GRC Engineer

Job Summary

Owning the end-to-end process for SOC 2 Type II and HIPAA compliance, the full-time Senior GRC Engineer will work remotely to manage audits, build automation for compliance programs, and integrate security controls within the development lifecycle.

Key responsibilities

• Lead SOC 2 Type II and HIPAA compliance efforts, including control design, evidence collection, and auditor interactions
• Build and maintain integrations that support the GRC platform, ensuring continuous compliance checks and automated evidence gathering
• Run the vendor security review program and maintain the risk register while embedding compliance requirements into the software development lifecycle

Required qualifications

• 5+ years of experience in security with a focus on GRC or compliance automation
• Proven technical ownership of at least one SOC 2 Type II or ISO 27001 audit
• Proficiency in coding and using APIs of GRC platforms
• Experience with cloud IAM and configuration, preferably in GCP
• Strong writing skills for creating clear policies and control narratives