Source Job

US Unlimited PTO

  • Own and maintain the compliance platform (Drata), including control mapping, evidence collection, continuous monitoring, and audit workflows
  • Manage control documentation, policies, procedures, and supporting artifacts across multiple compliance frameworks
  • Perform risk assessments, vendor security reviews, and control gap analyses, and track remediation through to completion

GRC PCI DSS SOC 2 ISO 27001 NIST

13 jobs similar to GRC Engineer

Jobs ranked by similarity.

US

  • Own day-to-day execution of SOC 1, SOC 2, PCI DSS, and ISO 27001 readiness and audit cycles.
  • Develop and maintain policies, procedures, risk assessments, control narratives, and supporting documentation.
  • Facilitate risk assessments for systems, vendors, products, and business initiatives.

Astra is building mission-critical infrastructure for moving money at scale. Their platform processes billions in annual transaction volume with 99.9%+ uptime, powering real-time transfers, bank debits, card disbursements, and complex financial compliance systems.

US

  • Play a critical role in the technical development, implementation, and maintenance of the GRC platform.
  • Drive integration strategies between GRC platforms and enterprise systems for automated data sharing and reporting.
  • Provide expert guidance and leadership on GRC technical matters to senior leadership and business stakeholders.

Jobgether is a platform helping candidates find jobs. They use AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements.

$126,480–$175,000/yr
US

  • Lead the configuration and management of GRC tools to ensure integration with security systems.
  • Manage the main dashboard for SOC 2 reporting, ensuring accuracy and compliance.
  • Develop and maintain a comprehensive risk management program and conduct risk assessments.

Engine is transforming business travel into something personalized, rewarding, and simple. They have over 20,000 companies relying on Engine to support over 1 million travelers and billions in annual bookings each year and have been recognized as one of the fastest-growing travel and fintech platforms in North America.

$162,000–$230,000/yr
US

  • Own and operate compliance programs such as SOC 2, ISO 27001, ISO27701, HIPAA, and TISAX.
  • Lead and manage internal, external, and customer audits end-to-end.
  • Track, remediate, and validate 100% of audit findings within agreed SLAs.

Airtable is the no-code app platform that empowers people closest to the work to accelerate their most critical business processes. More than 500,000 organizations rely on Airtable to transform how work gets done and they strive to create a workplace where everyone has an equal opportunity to thrive.

US Unlimited PTO

  • Design and test prompts to shape AI behavior and review outputs.
  • Build and maintain the “truth layer” for real-world GRC answers.
  • Evaluate and improve AI quality, ensuring responsible AI use.

Vanta helps businesses earn and prove trust by continuously monitoring and verifying their security. They empower companies to practice better security and prove it with ease, with a kind and talented team that consists of both people with and without prior security experience.

US

  • Serve as the primary vCISO and subject matter expert for multiple clients.
  • Lead data-centric cybersecurity programs aligned to business risk.
  • Manage, mentor, and develop vCISO team members.

Coretelligent partners with growing, highly regulated organizations that need secure, dependable IT environments built to scale. They deliver managed IT, cybersecurity, cloud, and strategy, through a model designed for consistency, transparency, and trust. They are building a team of professionals who care deeply about quality, ownership, and continuous improvement.

US

  • Coordinate compliance with standards (PCI, HIPAA, ISO 27002, SOC 1/2/3, FISMA/FedRAMP, etc.) under guidance.
  • Maintain evidence repositories and partner with SMEs to refresh artifacts.
  • Coordinate audits and certification efforts, partnering with support teams on timelines and resourcing.

Experian is a global data and technology company, powering opportunities for people and businesses around the world. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), they have a team of 22,500 people across 32 countries.

Global

  • Lead SOC 1 & SOC 2 (Type I/II) control scoping, testing, and reporting.
  • Act as primary client contact, translating technical control requirements into clear, actionable guidance.
  • Mentor and supervise junior auditors for alignment with standards.

Jobgether uses an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Their system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company.

$0–$56,480/yr
UK

  • Supporting the implementation and operation of Monzo’s new GRC system.
  • Acting as the primary point of contact for all things related to the GRC system across Monzo.
  • Identifying opportunities to streamline processes, automate tasks, and improve system usability.

Monzo is on a mission to make money work for everyone, waving goodbye to traditional banking complexities. They offer personal and business accounts and more in the UK, aiming to solve problems and change lives.

US

  • Collaborate with business leadership, Legal, Procurement, and Cyber to review terms and conditions.
  • Track status of risk remediations in the risk register with business stakeholders.
  • Contribute to overall program enhancements and drive automation with various IT and Cybersecurity stakeholders.

NBCUniversal is a leading media and entertainment company that creates world-class content across film, television, and streaming. They own and operate entertainment and news brands, with a focus on improving communities, championing an inclusive culture, and attracting a talented workforce.

Europe

  • Maintain and improve security policies and controls across the platform.
  • Perform compliance validation and prepare for audits.
  • Conduct risk assessments on new workloads and track mitigation actions.

Jobgether is a platform that connects job seekers with companies. They use AI to match candidates with roles and ensure fair application reviews.

$135,000–$150,000/yr
US Unlimited PTO 12w maternity 4w paternity

  • Lead customer due diligence questionnaire (DDQ) and RFP response process and third-party risk management process.
  • Support enterprise sales with technical customer security discussions.
  • Lead SOC 2 Type II audit preparation, evidence collection, and remediation.

Vanilla is an AI-powered estate advisory platform that aims to modernize estate planning. They are a startup distributed across the U.S. with a mix of fully remote and hybrid roles that embraces flexibility and values curious builders and problem-solvers.

Latin America

  • Lead ITGC and application control testing efforts
  • Guide and review work completed by junior team members
  • Perform walkthroughs, testing, and documentation for SOC 2, SOC 1, and HIPAA engagements

Insight Assurance is a global audit firm transforming how organizations achieve cybersecurity and compliance. Founded by former Big 4 (EY) professionals, they deliver next-generation audit services and are a fast-growing global audit firms with 170+ professionals.