GRC Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Spearhead the evolution of the Technology Compliance program

• Transition from manual audit testing to Compliance-as-Code (CaC), Policy-as-Code (PaC), and Continuous Control Monitoring (CCM)

• Integrate controls within CI/CD pipelines in the Azure cloud environment

• Automate technical controls for data persistence layers

• Incorporate security checks into development workflows and Infrastructure-as-Code (IaC)

• Design, create, and uphold executable policies utilizing Azure Policy, Open Policy Agent (OPA), or Rego

• Construct and manage automated pipelines to audit cloud environments, database clusters, and storage systems against compliance standards

• Develop automated database security controls for encryption at rest, key rotation, data masking, database activity monitoring (DAM), and IAM/PIM access controls

• Integrate automated compliance and configuration verifications into DevOps deployment pipelines

• Produce Python, PowerShell, or Go scripts to collect, compile, and preserve audit evidence

• Automate the remediation of control failures, including attestations

• Identify, document, and assess technical security risks, threats, and vulnerabilities

• Convert technical risks into business-impact metrics for leadership

• Carry out any other assigned responsibilities

⛳️ Requirements

• Bachelor’s Degree in Computer Science, Cybersecurity, Management Information Systems (MIS), or equivalent experience

• Strong background in database administration with extensive knowledge of technical database compliance rules (PCI-DSS) and Security GRC practices

• Over 10 years of experience as a subject matter expert previously in DBA roles and/or GRC Engineer

• Robust program management abilities within large, complex organizations

• Capability to propose solutions and execute them effectively with limited supervision

• Proficient in building strong relationships with Security, Engineering, Product, and other vital stakeholders

• Ability to showcase GRC Engineering practices and the use of AI solutions

• Previous experience with GRC tooling for control automation is highly preferred

• This position is currently not eligible for sponsorship

• Must adhere to applicable work authorization requirements

🏝️ Benefits

• Competitive wages

• Medical with telemedicine

• Dental and Vision

• Basic and Optional Life Insurance

• Paid Time Off (PTO)

• Maternity, Parental, Family Care

• Community Volunteer Time Off

• 12 Paid Holidays

• Company Paid Disability Insurance

• 401k (with employer match)

• Health Savings Accounts (HSA) with company provided contributions

• Flexible Spending Accounts (FSA)

• Supplemental Insurance

• Mental Health and Well-being: Employee Assistance Program (EAP)

• Tuition Reimbursement

• Wellness program

• Remote-first, flexible environment

• Psychological safety, wellbeing and belonging