Senior Security GRC Engineer
New
M
MozillaCybersecurity GRC
Remote USFull-TimeSenior
Salary137,000 - 183,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- Typically 2-4 years
- Required Skills
- Python
Requirements
- Typically 2-4 years of experience in cybersecurity, GRC, IT audit, or a related field.
- Working knowledge of security and compliance frameworks such as SOC 2, ISO 27001, or NIST.
- Familiarity with risk assessment concepts and the risk management lifecycle.
- Hands-on experience with a GRC platform such as Vanta, Drata, OneTrust, or ServiceNow GRC.
- Experience supporting an audit, such as SOC 2 or ISO 27001.
- Exposure to vulnerability management, third-party risk, BC/DR, secure development practices, or penetration test coordination.
- Scripting or automation skills, such as Python, SQL, or workflow tools.
- A relevant certification or one in progress, such as Security+, CISA, CISM, or CISSP.
- Strong organization and follow-through across multiple workstreams and deadlines.
- Clear written and verbal communication and ability to work with technical and non-technical stakeholders.
Responsibilities
- Perform risk assessments and process incoming risk questions and intake requests.
- Maintain the risk register, track risk treatment plans, and manage exceptions and issues.
- Support third-party risk activities, including vendor assessments, questionnaire review, and remediation tracking.
- Coordinate audit evidence collection and help prepare control owners and stakeholders for audit interviews.
- Maintain SOC 2 system descriptions, ISMS documentation, and Statements of Applicability.
- Track audit gaps and findings and drive remediation to closure with control owners.
- Support governance for the Secure Software Development Lifecycle (SSDLC), data classification, and data governance.
- Assist with business impact analysis and business continuity/disaster recovery activities.
- Track vulnerability management metrics and coordinate penetration testing engagements and follow-up.
- Administer the GRC platform and help streamline or automate GRC processes.
View Full Description & ApplyYou'll be redirected to the employer's site
