DevSecOps Engineer (GRC) - Compliance & Audit Lead

Respond; Kuala Lumpur; On-site; MYR 120,000 - 240,000; Full time

Benefits offered by this job

Mental health allowance

Flexible working hours

Competitive compensation package

Growth opportunities

Virtual events

Job summary

respond.io seeks a DevSecOps Engineer (GRC) to own governance end to end, including the compliance platform, external audits, and vendor risk. You will ensure evidence, mapping, and remediation stay ahead of regulatory demands while collaborating with engineering teams.

You will automate compliance checks, translate controls for engineers, and manage audits for ISO 27001, GDPR, and SOC 2 Type 2 readiness. Strong English skills are required.

Qualifications

• 3–5+ years in GRC or security compliance roles with ISO 27001 and GDPR experience.
• Experience managing SOC 2 Type 2 readiness projects.
• Ability to translate controls into actionable engineering tasks.

Responsibilities

• Own and scale the compliance automation platform.
• Coordinate evidence collection and policy-to-framework mapping for audits.
• Drive ISO 27001 and GDPR audits end to end and manage SOC 2 Type 2 readiness.
• Serve as technical expert for security questionnaires and due diligence.

Skills

GRC experience

Compliance automation

Audit management

English communication

ISO 27001/GDPR

CISA/CRISC/CISSP

Technical fluency with microservices/A

Tools

Sprinto

Drata

Vanta

Job description

respond.io seeks a DevSecOps Engineer (GRC) to own governance end to end, including the compliance platform, external audits, and vendor risk. You will ensure evidence, mapping, and remediation stay ahead of regulatory demands while collaborating with engineering teams.

You will automate compliance checks, translate controls for engineers, and manage audits for ISO 27001, GDPR, and SOC 2 Type 2 readiness. Strong English skills are required.