Remote GRC Security Engineer for FedRAMP & Compliance

1Password; Canada; Remote; CAD 111,000 - 155,000; Full time

Job summary

1Password is seeking a security/compliance leader to drive GRC initiatives across commercial and federal programs. You’ll coordinate with Security, Engineering, Legal, Privacy, and external assessors to implement controls, evidence packages, and continuous monitoring.

This role emphasizes AI-assisted workflows and scalable governance across Canada and the US. You’ll apply multiple frameworks, manage complex initiatives, and help shape our secure, compliant product strategy in a remote-capable

Qualifications

• Three or more years of experience in security, compliance, risk, audit, GRC, program management, or related technical discipline.
• Manage moderately complex, cross-functional compliance or security initiatives with strong organization and ownership.
• Apply frameworks such as SOC 2, ISO 27001, NIST 800-53, CMMC, FedRAMP, PCI DSS or similar standards.

Responsibilities

• Manage GRC initiatives spanning commercial compliance, federal compliance, security risk, vendor risk, policy management, and customer trust.
• Support planning, assessment preparation, remediation, and continuous monitoring for FedRAMP, CMMC, NIST 800-53, and related programs.
• Partner with control owners, Security, Engineering, Legal, Privacy, auditors, assessors, and stakeholders to gather evidence, track actions, and resolve gaps.
• Define and improve how evidence is generated, validated, mapped to requirements, stored, and traced to its source.
• Monitor control health, evidence freshness, configuration drift, exceptions, and remediation progress.
• Build or configure automated and AI-assisted workflows to reduce manual effort and improve reliability.
• Maintain project plans, action trackers, risk logs, documentation, and status updates, contributing to repeatable team practices.

Skills

Security governance

Program management

GRC frameworks

Vendor risk

AI in daily work

Tools

Drata

Tines

Vanta

ServiceNow

Archer

LogicGate

Secureframe

Job description

1Password is seeking a security/compliance leader to drive GRC initiatives across commercial and federal programs. You’ll coordinate with Security, Engineering, Legal, Privacy, and external assessors to implement controls, evidence packages, and continuous monitoring.

This role emphasizes AI-assisted workflows and scalable governance across Canada and the US. You’ll apply multiple frameworks, manage complex initiatives, and help shape our secure, compliant product strategy in a remote-capable