Senior Security Engineer, GRC

New

United States and Canada - Remote OpportunityFull-TimeSenior

Salary180,000 - 225,000 USD per year

Apply NowOpens the employer's application page

Job Details

8+ years of experience in GRC, information security compliance, or a closely related field.
Deep, hands-on experience with at least two major compliance frameworks (SOC2, ISO 27001, HIPAA, PCI-DSS, or FedRAMP).
Proven track record managing high volumes of security questionnaires and enterprise due diligence requests (SIG, CAIQ).
Scripting and automation fluency (Python, Bash, or similar).
Strong customer-facing communication skills.
Solid understanding of risk management principles and experience performing risk assessments.
Ability to translate technical security controls into clear, business-appropriate language.
Strong organizational skills and ability to manage multiple concurrent questionnaire engagements.
Bachelor's degree in Information Security, Computer Science, Business, or a related field (or equivalent experience).

Own the intake, prioritization, and completion of all inbound customer security questionnaires, RFPs, and due diligence requests.
Serve as the primary customer-facing representative for security and compliance.
Build and maintain a comprehensive, evergreen response library for common security and compliance questions.
Build and maintain automations to continuously validate the organization's compliance posture across key frameworks.
Build dashboards and reporting pipelines that provide leadership with real-time visibility into compliance posture.
Design and automate the third-party risk assessment process.
Perform ongoing risk assessments and maintain a risk register.
Author, maintain, and operationalize security policies and procedures.
Collaborate cross-functionally with Engineering, Legal, and Product teams.

View Full Description & ApplyYou'll be redirected to the employer's site