GRC Engineer

SpyCloud is on a mission to make the internet a safer place by disrupting the criminal underground. The GRC Engineer plays a critical role in strengthening SpyCloud's compliance posture by driving audit readiness, scaling continuous control testing, and embedding compliance requirements into cloud-native systems and workflows.

Requirements

• 5+ years of experience in Governance, Risk & Compliance (GRC), security compliance, auditing, or related roles
• Demonstrated experience applying SOC 2, ISO 27001, and/or CMMC requirements to cloud environments
• Experience leading audit readiness activities and working directly with auditors
• Strong collaboration experience with engineering and cloud operations teams
• Bachelor's degree in Information Security, Computer Science, Engineering, or equivalent professional experience
• Ability to understand and write code, preferably Python, to automate evidence collection and validate cloud controls
• Strong knowledge of cloud architectures, IAM, logging, monitoring, and cloud security best practices
• Hands-on experience using Vanta for compliance automation and integrations
• Familiarity with SOC 2, ISO 27001, CMMC, NIST 800-53, and CIS Benchmarks
• Strong written and verbal communication skills
• Ability to work independently and manage multiple priorities
• Strong analytical, problem-solving, and collaboration skills

Benefits

• 401(k) with Employer Contribution
• Health, Vision, and Dental Insurance
• Health Savings Account (HSA) available with Employer Contribution
• Employer Paid Life, Short-term, and Long-term Disability Insurance
• Generous PTO Plan and 16 paid holidays per year