Sr. GRC Engineer

📋 Description

• Use AI to accelerate audit evidence preparation, policy documentation, control testing workflows
• Identify maturity gaps across compliance and security operations and translate them into
• Own one or more regulatory compliance programs end-to-end, including SOC 2 Type II, ISO
• Conduct organizational risk assessments and present findings to leadership with clear
• Lead incident response for complex, multi-system security events from investigation through
• Work directly with engineering, product, and IT teams to deliver compliance requirements, validate

🎯 Requirements

• 3 to 5 years of hands-on security experience with demonstrated ownership of compliance programs or
• Deep working knowledge of at least two of the following frameworks: SOC 2, ISO 27001, PCI-DSS
• Demonstrated ability to independently own auditor relationships and manage an audit cycle
• Experience leading incident response investigations from triage through root cause analysis and
• Demonstrated ability to translate security risk into business-risk language that enables leaders to
• Active, demonstrated use of AI tools to accelerate security workflows such as evidence collection

🎁 Benefits

• Highly competitive, employer-heavy coverage, including $0 premium options, strong 401(k) match