Senior GRC Engineer

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Oversee the remediation efforts for SOC 2, TISAX, and DORA audits with established deadlines and visibility for stakeholders.

• Handle enterprise risk assessments and the risk treatment process, including maintaining the risk register and conducting acceptance reviews.

• Lead the collection of audit evidence, documentation of controls, resolution of findings, and coordination of audits across various frameworks.

• Create and sustain governance metrics, Key Risk Indicators (KRIs), and reporting dashboards accessible to both customers and the board.

• Design and enhance control frameworks that comply with customer and regulatory standards.

• Oversee the tracking of Plans of Action and Milestones (POAM) and governance of vulnerability remediation.

• Collaborate with business units, executives, and audit partners regarding compliance responsibilities and risk reporting.

⛳️ Requirements

• A minimum of 7 years of experience in Governance, Risk, and Compliance (GRC), audit, or compliance engineering roles.

• Proven track record of managing multiple engagements simultaneously.

• Extensive practical experience with SOC 2, ISO 27001, and enterprise audit procedures.

• Proficient in GRC platforms such as ServiceNow, Archer, AuditBoard, or similar tools.

• Strong technical knowledge of IT controls, security frameworks, and risk management methodologies.

• Exceptional communication skills for coordinating audits, tracking exceptions, and reporting to the board.

• Experience in developing metrics and dashboards that effectively convey risk posture to executive leadership.

• Candidates must be legally authorized to work in the country where the job is offered.

• JD Power does not provide employment sponsorship for this role.

🏝️ Benefits

• Medical insurance

• Dental insurance

• Vision insurance

• Disability insurance

• Life insurance

• Retirement savings programs

• Paid time off

• Wellness programs

• Flexible work arrangements

• Opportunities for learning and development