GRC Engineer

DeWinter Group; San Jose (CA); On-site; USD 150,000 - 190,000; Full time

Job summary

DeWinter Group in San Jose, CA, seeks a seasoned GRC Engineer to shape security governance, risk, and compliance in a cutting-edge environment, focusing on Data Governance, AI Governance, and Risk Management.

The role requires strong CISSP domains knowledge, ISMS experience, and the ability to communicate complex security concepts to diverse stakeholders; prior AI governance experience is a plus, and the engagement is W2 through a staffing agency for 1 year.

Qualifications

• 7+ years of experience in governance, risk, compliance, or information security.
• Strong knowledge of CISSP domains, best practices, and controls.
• Experience with regulations including EU AI Act, SOX, GDPR.

Skills

GRC governance

Risk assessment

Regulatory compliance

Security frameworks

AI governance

ISMS familiarity

Stakeholder communication

Security metrics

AI certifications

Education

Bachelor’s degree in Computer Science or Information Security

Master’s degree preferred

Job description

Job Title: GRC Engineer

Overview:
Are you passionate about shaping the future of security governance, risk, and compliance in a cutting-edge environment? We are seeking a dynamic GRC Engineer to join a forward-thinking team dedicated to enhancing security strategies through innovative Data Governance, AI Governance, and Risk Management initiatives. This pivotal role provides an exciting opportunity to influence enterprise security programs, collaborate with global teams, and deploy AI-driven solutions that advance industry standards. If you thrive in a fast-paced, innovative setting and possess a deep expertise in security frameworks and AI application, this is the role for you.

Required Skills:

• Minimum of 7 years experience in governance, risk, compliance, and/or information security.
• Strong knowledge of CISSP security domains, industry best practices, and security controls.
• Proven experience with security regulations including EU AI Act, SOX, GDPR.
• Functional understanding of ISMS frameworks and certification reports (ISO 42001 & 27001, SOC, CAIQ).
• Ability to articulate security concepts effectively to both technical and non-technical stakeholders.
• Expertise in risk assessment methodologies, remediation tracking, and metrics/reporting automation.
• Familiarity with AI development, governance, and intelligent workflow design.
• Industry certifications (additional AI-related certifications are a plus).

Nice to Have Skills:

• Experience with AI and machine learning toolsets applied within security frameworks.
• Knowledge of security tools and automation platforms.
• Advanced project management skills and familiarity with cross-functional team leadership.
• Experience working with global or distributed teams.

Preferred Education and Experience:

• Bachelor’s degree in Computer Science, Information Security, or related field (Master’s preferred).
• Prior experience in enterprise-level security program development and execution.
• Track record of implementing innovative AI-driven security solutions.

Other Requirements:

• Location: Onsite in San Jose, CA (remote work not specified).
• Certifications: Relevant industry certifications (CISSP, AI-related certifications preferred).
• Travel: Not specified.
• This position is W2-only and is engaged through a staffing agency with a markup fee of 45%.
• Immediate start preferred, with a duration of 1 year and potential for extension.

DeWinter Group and Maris Consulting is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. We post pay scales which are based on our client pay ranges. DeWinter, Maris, and our clients have the right to modify the requirements of the role which can impact the pay ranges posted.