Senior Security Engineer - GRC

📋 Description

• Design and build framework crosswalks and control mappings across PCI DSS, SOC 1 Type II, ISO
• Own the Master Control List end-to-end, including control nomenclature, relational database
• Manage full lifecycle of controls, evidence requirements, and implementation as new standards are
• Drive evidence automation in GRC tooling, building collection workflows that scale
• Partner with Security Engineering, Legal, and Finance to validate control design and translate
• Design, build and maintain AI-powered GRC tooling, multi-agent pipelines for risk quantification

🎯 Requirements

• Must Have: 6+ years of experience in security engineering, GRC, or compliance engineering
• Deep working knowledge of PCI DSS, SOC 1 or SOC 2, HITRUST, and at least one of ISO 27001 or NIST
• Experience designing or maintaining control frameworks, crosswalks, or unified control
• Hands-on experience managing evidence requirements and control implementation
• Proficiency with compliance automation tooling (Optro, Drata, Vanta, Hyperproof, Anecdotes, or
• Ability to translate technical control design into clear implementation guidance for engineering

🎁 Benefits

• Competitive compensation package including base salary and performance bonus
• May include benefits and/or other applicable incentive compensation plans