GRC Engineer, I

This is a fully remote position, open to applicants in India.

📋 Description

• Implement comprehensive client compliance initiatives that align with SOC 2, ISO 27001, and regulatory standards.

• Develop and revise corporate security policies, standard operating procedures, and control evidence for formal audits and assessments.

• Collaborate with cross-functional technical teams to identify, assess, track, and address cybersecurity risks and control deficiencies.

• Monitor compliance milestones, gather evidence, and execute tasks across multiple client engagements under senior oversight.

• Interact directly with client stakeholders through email, chat, and video calls to collect evidence, clarify control requirements, and provide updates.

• Perform structured control evaluations and readiness assessments to ensure ongoing compliance alignment.

• Work with internal IT, security, and operations teams to implement corrective action plans and enhance compliance posture.

• Revise delivery templates, playbooks, and standard operating procedures with guidance from senior leadership.

• Act as the primary liaison for a portfolio of accounts and oversee engagements from start to finish.

• Address client escalations with professionalism and urgency.

• Manage active client accounts within the initial 15 days.

⛳️ Requirements

• Demonstrated ability to communicate directly with U.S. clients.

• Strong organizational skills to handle multiple cybersecurity compliance engagements concurrently.

• Practical execution experience with SOC 2, ISO 27001, or NIST CSF frameworks in technology-driven cybersecurity environments.

• Familiarity with drafting, implementing, and enforcing enterprise cybersecurity policies and control benchmarks.

• Capability to excel in a fast-paced startup environment and adapt to changing priorities and dynamic client needs.

• Exceptional written and verbal communication skills in English.

• Experience with automated compliance solutions such as Vanta or similar GRC platforms.

• Knowledge of GDPR, HIPAA, or PCI DSS.

• Relevant certification such as ISO 27001 Lead Implementer, CISA, or Security+.

• Reliable, high-speed internet connection.

• Professional home office setup conducive to confidential conversations, virtual interviews, and seamless collaboration.

• Availability to work from 8:00 AM to 5:00 PM U.S. Eastern Time.

• Willingness and capability to travel locally for occasional onsite meetings, team gatherings, or business activities.

• Must participate in live video interviews with the camera on and verify identity during the recruitment and onboarding process.

• Successful completion of identity verification and background checks, where allowed by law.

• Quiet, professional home office environment.

• Must be flexible to work U.S. Eastern Time zone hours.

• Proficient in written and verbal English communication skills.

🏝️ Benefits

• Clear pathway with mentorship and training opportunities.

• Reimbursement for successfully completing approved training and certification courses related to your current role.

• Competitive base salary with regular performance evaluations linked to merit-based appraisals and bonus opportunities.

• Significant potential for career advancement.

• Flexibility to work remotely while collaborating with a global team.