GRC Engineer – Security Compliance for SaaS (Remote)

Gainsight; México; Remote; MXN 900,000 - 1,400,000; Full time

Benefits offered by this job

Corporate bonus

Aguinaldo (holiday bonus)

Medical, dental, vision through Remote

Job summary

Gainsight is hiring a GRC Engineer to join our Security team. This remote role is based in Mexico and reports to the Director of Security.

You will manage governance, risk, and compliance programs, prepare for audits, and automate evidence collection with cross‑functional partners like Security, Engineering, IT, and Legal. The ideal candidate has strong GRC knowledge (SOC 2, ISO 27001, NIST), audit experience, and excellent communication.

Qualifications

• 5+ years of experience in GRC, security compliance, IT audit, or risk management.
• Experience with SOC 2, ISO 27001, and NIST mapping controls.
• Experience supporting external audits and assessments, including scoping, evidence collection, walkthroughs, and remediation tracking.
• Experience performing risk assessments, maintaining a risk register, and reviewing third‑party security.
• Familiarity with compliance automation or GRC tools and security automation.
• Understanding of cloud infrastructure and security controls to evaluate evidence with engineers.
• Clear written and verbal communication, and ability to manage several deadlines simultaneously.

Responsibilities

• Maintain multiple control frameworks and map controls to standards
• Track control ownership and health
• Meet with control owners to address gaps in controls
• Scope audits for internal and external audits
• Work with auditors through the audit process from kick‑off to completion
• Collect and review evidence for all frameworks to ensure compliance and traceability
• Track audit findings and remediations to completion
• Draft, update, and maintain all security policies, procedures, and standards regularly
• Answer customer security questionnaires and requests
• Support customer audits and provide compliance documentation where required
• Manage the risk register including exceptions, acceptance, expiry
• Build and maintain integrations and automation for evidence collection and control monitoring
• Work with engineering teams to align technical controls to business requirements

Skills

GRC frameworks

SOC 2

ISO 27001

NIST

Audit & risk management

Automation scripting

Vendor risk management

Clear communication

Job description

Gainsight is hiring a GRC Engineer to join our Security team. This remote role is based in Mexico and reports to the Director of Security.

You will manage governance, risk, and compliance programs, prepare for audits, and automate evidence collection with cross‑functional partners like Security, Engineering, IT, and Legal. The ideal candidate has strong GRC knowledge (SOC 2, ISO 27001, NIST), audit experience, and excellent communication.