Senior GRC Engineer

📋 Description

• Act as a technical GRC partner to technical and non-technical teams, translating compliance
• Use the cross-framework control crosswalk to identify synergies across regulatory requirements, so
• Support customer-facing security/compliance conversations requiring deeper technical context
• Build the processes, scripts, workflows, and tooling that embed controls into daily operations, and
• Create knowledge-sharing resources and clear documentation/diagrams that help partners understand
• Partner with Risk Management to engineer risk identification, scoring, and monitoring into

🎯 Requirements

• 6+ years in security engineering, GRC, DevSecOps, or a closely related technical role, with
• Comfortable writing scripts or light code (Python, Bash, or similar) to automate evidence
• Working knowledge of at least two of: ISO 27001 and its extensions (27017, 27018, 27701, 42001)
• Comfortable building and reading system/data-flow diagrams, and proficient with a GRC/risk platform
• Experience translating compliance/risk requirements into implementation guidance engineering teams
• Comfort engaging directly with both engineering teams and customers on technical topics, and