GRC & Cyber Risk Engineer

Wilson Sonsini Goodrich & Rosati, Professional Corporation; Palo Alto (CA); On-site; USD 110,000 - 170,000; Full time

Job summary

Wilson Sonsini is seeking a mid-level GRC Engineer to join the IT Risk Operations team in Palo Alto. This role emphasizes governance, risk, and compliance with a strong technical focus and cross-functional collaboration.

Responsibilities include framework alignment, control mapping, risk register management, threat analysis, and supporting third‑party risk and awareness programs for client engagements.

Qualifications

• 3+ years of experience in security risk, governance, and compliance (GRC).
• Familiarity with NIST CSF and NIST SP 800-53/30/39.
• Knowledge of IT fundamentals: networking, IAM, and cloud security (Azure).
• Excellent written and verbal communication; able to explain risk to technical and non-technical audiences.

Responsibilities

• Contribute to implementation and maintenance of NIST CSF program and align with related standards.
• Map security controls to frameworks (e.g., SP 800-53) and perform gap analyses and remediation.
• Manage risk registers, support ServiceNow requirements, testing and workflows.
• Capture risk insights and prepare periodic risk, compliance, and SLA metrics for leadership.
• Administer cybersecurity awareness training and conduct Third-Party Risk analyses.

Skills

NIST CSF

Risk management

GRC tooling

Security operations

Threat analysis

Education

Bachelor's degree in information security/IT

Tools

ServiceNow

SIEM

Microsoft Defender

Job description

Wilson Sonsini is seeking a mid-level GRC Engineer to join the IT Risk Operations team in Palo Alto. This role emphasizes governance, risk, and compliance with a strong technical focus and cross-functional collaboration.

Responsibilities include framework alignment, control mapping, risk register management, threat analysis, and supporting third‑party risk and awareness programs for client engagements.