GRC Engineer

We are looking for a highly technical Governance, Risk, and Compliance (GRC) Engineer to strengthen our GRC function. This individual contributor role bridges traditional GRC responsibilities with hands-on technical expertise, ensuring that risk assessments, architecture reviews, and control validations are grounded in real-world engineering practices.

Requirements

• 5+ years of experience in GRC, security engineering, architecture review, or related technical security roles.
• Strong understanding of cloud platforms (AWS, GCP, Azure) and their native security controls.
• Hands-on experience reviewing architecture diagrams, data flows, and engineering design patterns.
• Deep familiarity with security frameworks: NIST CSF, ISO 27001/27002//27017/27018/42001, PCI-DSS, CIS, SOC 2 Trust Principles, and MITRE ATLAS/ATT&CK.
• Proven ability to conduct comprehensive technical risk assessments.
• Coding and scripting capabilities using Python, SQL, Go, and Powershell.
• Understanding of CI/CD pipelines, container orchestration (Kubernetes), IAM, network security, and logging pipelines.

Benefits

• Paid Time Off
• 401k Matching
• Retirement Plan
• Four Day Work Week
• Tuition Reimbursement