Senior Security Engineer, GRC

Job Summary

To enhance security governance and compliance, the full-time remote Senior Security Engineer, GRC will design and implement automated security control monitoring, manage technical evidence collection in AWS, and lead internal and external audit engagements using automated systems.

Key responsibilities

• Design, build, and maintain automated security control monitoring systems and convert manual testing processes to continuous control monitoring
• Engineer self-service technical evidence collection in AWS, allowing control owners and auditors to retrieve evidence without GRC intervention
• Lead audit engagements, defending automated test designs and system-generated evidence while overseeing complex control tests and risk assessments

Required qualifications

• 5+ years of experience in a GRC or similar team
• 2+ years of hands-on experience with automation in a scripting or programming language, preferably Python
• Demonstrated AWS experience relevant to control monitoring and evidence generation
• Experience with industry frameworks and regulations such as ISO 27001, SOC 2, and GDPR
• Ability to defend automated control testing and system-generated evidence to auditors