Senior GRC Engineer

J.D. Power; Ottawa; Remote; CAD 120,000 - 145,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Disability insurance

Retirement plan

Paid time off

Wellness programs

Job summary

JD Power is seeking a Senior GRC Engineer to lead governance, risk and compliance initiatives across enterprise frameworks. You will drive audit remediation for SOC 2, TISAX and DORA with fixed deadlines, maintain control frameworks, and deliver transparent governance metrics to customers and the board.

In this role you will manage risk assessment, evidence collection, POAM tracking, and coordinate across business units and audit partners to ensure timely findings resolution and a proactive risk

Qualifications

• 7+ years in GRC, audit, or compliance roles.
• Hands-on SOC 2, ISO 27001 experience.
• Proficient with GRC platforms (ServiceNow, Archer, AuditBoard).
• Strong IT controls and risk methodologies knowledge.
• Excellent communication for board reporting.

Responsibilities

• Lead SOC 2, ISO 27001, and DORA remediation efforts with fixed deadlines and stakeholder visibility.
• Maintain risk register and risk treatment processes.
• Coordinate evidence collection, control documentation, finding resolution, and audit coordination across all frameworks.
• Develop governance metrics, KRIs, and reporting dashboards visible to customers and board.
• Manage Plan of Action and Milestones (POAM) tracking and vulnerability remediation governance.
• Coordinate with business units, executives, and audit partners on compliance obligations and risk reporting.

Skills

GRC experience

SOC 2

ISO 27001

Audit coordination

Regulatory frameworks

Tools

ServiceNow

Archer

AuditBoard

Job description

Senior GRC Engineer# Careers## Senior GRC EngineerApply: Remote USA: Remote Canada: Full time: Posted Yesterday: R-100557**Job Description:****Job Title:** Senior GRC Engineer**Location:** Remote | USA, Canada**Reports to:** Cybersecurity Governance Manager**Employment Type:** Full-timeThis is a new vacancy **About the Role:**Senior GRC Engineer to lead governance, risk, and compliance initiatives across enterprise frameworks. This role is critical as the organization faces active audit cycles for SOC 2, TISAX, and DORA compliance, with findings visible to customers and the board. You will drive audit remediation with fixed deadlines, maintain control frameworks, and ensure stakeholder confidence through transparent governance and metrics.You will reduce the audit remediation backlog from months to weeks, establish sustainable compliance processes, and become the trusted advisor to both internal leadership and external auditors. Success means audit findings visible to customers are resolved on schedule, governance metrics are accurate and trusted, and the organization transitions from reactive compliance to proactive risk management.**In this role, you will:*** Lead SOC 2, TISAX, and DORA audit remediation efforts with fixed deadlines and stakeholder visibility* Manage enterprise risk assessment and risk treatment processes, including risk register maintenance and acceptance reviews* Direct audit evidence collection, control documentation, finding resolution, and audit coordination across all frameworks* Develop and maintain governance metrics, KRIs, and reporting dashboards visible to customers and board* Build and evolve the organization's control frameworks aligned with customer and regulatory requirements* Manage Plan of Action and Milestones (POAM) tracking and vulnerability remediation governance* Coordinate with business units, executives, and audit partners on compliance obligations and risk reporting**Required Qualifications:*** 7+ years in GRC, audit, or compliance engineering roles with demonstrated success managing parallel engagements* Deep hands-on experience with SOC 2, ISO 27001, and enterprise audit processes* Proficiency with GRC platforms (ServiceNow, Archer, AuditBoard, or equivalent)* Strong technical understanding of IT controls, security frameworks, and risk methodologies* Excellent communication skills for audit coordination, exception tracking, and board-level reporting* Experience developing metrics and dashboards that communicate risk posture to executive leadership**Preferred Qualifications:*** CISSP, CISM, or CRISC certification* Experience with DORA, PCI DSS 4.0, or EU regulatory frameworks* Background in B2B SaaS compliance and customer audit programs* Experience managing multiple concurrent audit frameworks and regulatory examinations**Compensation and Benefits**This position has a starting salary range of **$120,000 - $145,000 CAD / $140,000 - $165,000 USD** per year. The range represents what we reasonably and in good faith expect to pay for the role at the time of posting. An employee’s pay within the range is determined by a number of factors, including relevant skills, education, qualifications, experience, performance, business or organizational needs, and geographic location.Eligible employees may participate in medical, dental, vision, disability, life insurance, retirement savings programs, paid time off, wellness programs, and other company-sponsored benefits. Benefits vary by country and employment status.**Why Join JD Power**JD Power powers auto-related decisions through proprietary data, advanced analytics, deep industry expertise, and workflows that connect insight to action. Operating across North America, Europe, and Australia, we help customers make better decisions and achieve better outcomes.As a virtual-first company, we offer flexible work arrangements, opportunities for learning and development, and a culture centered on the Values that guide how we work every day.· **We power our customers’ success.** Everything we do is focused on helping customers make better decisions and achieve better outcomes.· **We are innovative, collaborative, and grounded in data.** We combine advanced analytics with human expertise to deliver insight that holds up in the real world.· **We make things easy.** We turn complexity into clarity so teams can act faster and with confidence.· **We get it done.** We focus on execution, accountability, and results.· **We start with trust and prove it every day.** Independence, integrity, and credibility are the foundation of our work. **Equal Opportunity & Accommodations**JD Power is committed to employing a diverse workforce. Qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, gender expression, veteran status, or disability.JD Power is committed to providing reasonable accommodations throughout the recruitment process for individuals with disabilities or other protected needs under applicable local laws. Please contact [e-mail] for accommodation request. **Data Privacy**JD Power does not disclose your personal data to unauthorized third parties. However, as a global corporation consisting of multiple affiliated companies in various countries, JD Power has international sites and JD Power uses resources located throughout the world. JD Power may from time to time also use third parties to act on JD Power’s behalf. You agree to the fact that to the extent necessary your personal data may be transferred and/or disclosed to any company within JD Power group of companies as well as to third parties acting on JD Power’s behalf, including also transfers to servers and databases outside the country where you provided JD Power with your personal data. Such transfers may include for example transfers and/or disclosures outside the European Economic Area and in the United States of America. If you are a California or United Kingdom resident, additional disclosures about the information we collect and how we use that information can be found by clicking here.**Applications**Candidates must be legally authorized to work in the country where employment is offered. JD Power does not provide employment sponsorship for this position.This position is posted exclusively on https://www.jdpower.com/business/careers and select trusted job boards such as LinkedIn or Indeed. All official communication comes from email addresses ending in @jdpower.com or @jdpa.com. We will never ask for payment, equipment purchases, or upfront fees. We may take additional steps to verify candidate information to protect the integrity of our recruitment process.To all recruitment agencies: JD Power does not accept unsolicited agency resumes and we are not responsible for any fees related to unsolicited resumes.