Security GRC Specialist

📋 Description

• Own and operate compliance frameworks (SOC 2, ISO 27001, GDPR)
• Drive audits end-to-end: readiness, evidence collection, auditor coordination
• Automate controls to reduce compliance overhead
• Lead responses to customer security questionnaires and due diligence
• Collaborate with engineering to design practical security controls
• Maintain security docs (trust center, whitepapers, FAQs)

🎯 Requirements

• 3–7+ years in security GRC, compliance, or security engineering-adjacent roles
• Hands-on experience with SOC 2, ISO 27001, or similar
• Experience supporting audits and customer-facing security conversations
• Comfortable working with engineers and understanding systems (cloud, infra, APIs)
• Ability to translate between compliance language and technical implementation
• Experience with modern cloud environments (AWS, GCP, Azure) is a strong plus