Senior Security Engineer GRC Engineering

About the Role:

• This is a senior individual contributor role focused on modernizing governance, risk, and compliance through engineering and automation.
• The role spans cloud environments, identity platforms, code repositories, endpoints, and ticketing systems to build continuous control monitoring.

Key Responsibilities:

• Own the end-to-end continuous control monitoring program, integrating identity providers, cloud platforms, code repositories, and other data sources.
• Develop a centralized common controls framework using ISO 27001 and SOC 2, and build evidence management layers for multiple frameworks.
• Collaborate with infrastructure security teams on policy-as-code and apply AI-assisted workflows with human oversight.

Requirements:

• 6+ years of experience spanning compliance program leadership, security engineering, or compliance engineering.
• Recent hands-on engineering experience with Python and APIs, plus strong knowledge of ISO 27001, SOC 2, and familiarity with FedRAMP, NIS2, DORA, and PCI DSS.
• Experience leading major compliance frameworks through assessment or certification, with the ability to communicate technical compliance concepts clearly.

Benefits:

• Remote working opportunity based in India with a globally distributed team.
• Employee-focused health and wellbeing programs and inclusive workplace.
• Opportunities for professional development and technical growth.