Senior GRC Engineer

Job Summary

As a Senior GRC Engineer, the full-time position will design and maintain compliance frameworks, oversee the Master Control List, and manage the lifecycle of controls while working remotely in a dynamic environment.

Key responsibilities

• Design and build framework crosswalks and control mappings across multiple compliance standards
• Own the Master Control List, including control nomenclature and operational maintenance
• Drive evidence automation in GRC tooling and manage the lifecycle of controls as new standards are adopted

Required qualifications

• 6+ years of experience in security engineering, GRC, or compliance engineering
• Deep working knowledge of PCI DSS, SOC 1 or SOC 2, HITRUST, and at least one of ISO 27001 or NIST CSF/800-53
• Experience designing or maintaining control frameworks across multiple compliance standards
• Hands-on experience managing evidence requirements and control implementation
• Proficiency with compliance automation tooling such as Optro, Drata, or Vanta