Principal Security Engineer – GRC Team Lead (Remote Eligible)

📋 Description

• Own the end-to-end GRC strategy and roadmap to drive compliance maturity.
• Design policy-as-code systems translating frameworks into enforceable code.
• Build custom control frameworks mapped to our cloud architecture and risk posture.
• Lead full audit cycles for SOC 2 Type II, ISO 27001, FedRAMP and more.
• Architect GRC platform strategy, integrating tooling with infra/identity/CI/CD.
• Design automated evidence collection and validation pipelines across AWS and tools.

🎯 Requirements

• 10+ years in GRC/compliance or security engineering; 5+ years in technical leadership.
• Degree in CS/CE/Cybersecurity or equivalent practical experience.
• Hands-on audits across SOC 2 Type II, ISO 27001, FedRAMP.
• Cloud architecture across AWS/GCP/Azure; IaC (Terraform/CloudFormation); CI/CD; IAM.
• GRC tooling experience (Vanta/Drata/ServiceNow GRC); integration and automation.
• Policy-as-code and compliance-as-code; automated controls and validation.

🎁 Benefits

• Employer subsidized medical, vision, and dental for full-time
• 401k match (50% of your contribution up to the first 6% of your eligible pay)
• Monthly stipend to support your work and productivity
• Flexible Time Away Program and Sick Time Off
• Teleworking options from any registered location in the U.S.
• Udemy courses and professional development opportunities