About the company
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Commercial GRC Engineer - Sr. Security Engineer based in United States.
Responsibilities
- Own control automation for SOC 2, ISO 27001/27017/27701, HIPAA, and related commercial frameworks
- Express controls, control tests, and cross-framework mappings as version-controlled code
- Translate compliance requirements into technical control logic, workflows, and integrations
- Shift compliance left by contributing to architecture and design reviews
- Design engineer-facing compliance experiences, including self-service control status and guardrails
- Support audit cycles end-to-end by coordinating evidence requests
- Build and maintain dashboards and reporting for control health and audit readiness
- Identify opportunities to eliminate duplicate evidence-gathering efforts
- Diagnose recurring control failures and stale evidence
- Partner with GRC and engineering stakeholders to expand control and risk-lifecycle capabilities
Requirements
- 4+ years of experience in GRC engineering, security engineering, compliance automation, IT audit support
- Hands-on ownership of at least one complete certification cycle such as SOC 2 or ISO 27001
- Practical experience with GRC or compliance automation platforms such as Vanta, Drata, Secureframe
- Strong understanding of cloud security fundamentals, including AWS, GCP, or Azure IAM, logging, encryption
- Solid working knowledge of SOC 2, ISO 27001, and ideally ISO 27017/27701 and HIPAA
- Comfort with scripting or light development using Python, JavaScript, or similar technologies
- Strong written communication skills
- Stakeholder-focused approach
- Demonstrated ability to trace control failures or audit findings to their root causes
- Legally eligible to work in the United States on an ongoing basis
Conditions
- U.S. base salary range of $175,000 - $227,500 USD
- Market-competitive incentive opportunity
- Employer-subsidized medical, vision, and dental coverage
- 401(k) match covering 50% of employee contributions up to the first 6%
- Monthly stipend
- Flexible Time Away Program plus sick time off
- Employer-sponsored life insurance and short- and long-term disability coverage
- 12 paid holidays per year
- Up to 24 weeks of parental leave
- One paid volunteer day each year
- Professional growth and development opportunities, including access to Udemy courses
- Teleworking options from registered locations across the U.S.