Remote Security GRC Engineer — Policy, Risk & Compliance

BairesDev; Colombia; On-site; COP 222,639,000 - 349,862,000; Full time

Benefits offered by this job

Remote work 100%

USD salary or local currency

Hardware and software setup for home

Job summary

BairesDev is hiring a Security GRC Engineer to lead governance, risk, and compliance across global teams. You will shape and maintain enterprise security policies and coordinate audits to ensure adherence to regulatory standards.

You will map controls to requirements, work with development teams to embed security throughout the SDLC, and monitor KPIs to measure program effectiveness. Strong English skills and 4+ years in GRC are required.

Qualifications

• Minimum 4+ years in Security GRC, Compliance, or Information Security.
• Proven experience implementing SOC2, ISO 27001, HIPAA, and PCI.
• Ability to map controls to regulatory requirements and drive audits.

Responsibilities

• Design, implement, and maintain security policies aligned with SOC2 and ISO 27001.
• Conduct risk assessments to identify and mitigate threats.
• Coordinate internal and external audits and gather audit evidence.
• Map controls to regulatory requirements for ongoing compliance.
• Collaborate with cross-functional teams to embed compliance in software delivery.
• Develop KPIs to measure the governance program’s effectiveness.

Skills

GRC governance

Policy writing

Risk assessment

Audit coordination

Compliance frameworks

English proficiency

Job description

BairesDev is hiring a Security GRC Engineer to lead governance, risk, and compliance across global teams. You will shape and maintain enterprise security policies and coordinate audits to ensure adherence to regulatory standards.

You will map controls to requirements, work with development teams to embed security throughout the SDLC, and monitor KPIs to measure program effectiveness. Strong English skills and 4+ years in GRC are required.