Senior Security Engineer GRC Engineering

📋 Description

• Own the end-to-end continuous control monitoring program, integrating identity providers, cloud
• Build monitoring and alerting workflows that identify degraded controls, route issues to
• Develop and maintain a centralized common controls framework using ISO 27001 and SOC 2 as
• Create an evidence management layer that captures, timestamps, indexes, and reuses audit evidence
• Design the compliance platform so that its own activity, controls, and evidence remain auditable
• Develop control validations as code, producing outputs that are actionable for engineers and

🎯 Requirements

• 6+ years of experience spanning compliance program leadership, security engineering, or compliance
• Demonstrated experience leading a major compliance framework through assessment, readiness
• Strong experience designing and mapping controls across multiple frameworks, with the ability to
• Recent hands-on engineering experience using Python and APIs for integrations and automation.
• Recent experience building or implementing AI-assisted compliance or security workflows, ideally
• Strong knowledge of ISO 27001 and SOC 2, with familiarity with FedRAMP 20x, NIS2, DORA, and PCI DSS.

🎁 Benefits

• Remote working opportunity based in India.
• Senior individual contributor role with significant ownership of the GRC engineering strategy and
• Opportunity to build and modernize compliance engineering capabilities from the ground up.
• Exposure to cloud security, continuous control monitoring, policy-as-code, AI-assisted compliance
• Direct opportunity to influence how security and compliance programs support audits
• Globally distributed and collaborative working environment.