GRC Engineer: Compliance Automation & Continuous Security

United States Digital Space LLC; United States; Remote; USD 140,000 - 200,000; Full time

Job summary

United States Digital Space LLC is seeking a senior GRC Engineer to own the GRC Engineering function and shape an automated, scalable compliance program. You will design the foundational data models, pipelines, and evidence framework across SOC 2, ISO, and NIST, while delivering real-time risk visibility and scalable controls.

You will implement continuous controls monitoring, automate evidence collection, and drive data-informed risk assessments across security, risk, and engineering teams,

Qualifications

• Proven experience building internal tools and services used by security teams.
• Experience mapping controls to SOC 2, ISO 27001/27701, and NIST across multiple audits.
• Strong Python and SQL with a track record of data-driven decision making.
• Familiarity with cloud security controls and IaC pipelines to automate compliance checks.

Responsibilities

• Architect GRC's Engineering Foundation: build pipelines and codified truth for controls and evidence across frameworks.
• Build Continuous Controls Monitoring to automate evidence collection, testing, and monitoring for drift.
• Turn data into risk signals with dashboards and KPI reporting for real-time visibility.
• Drive data-informed risk assessments and mitigation recommendations.
• Automate operational toil like evidence pulls and vendor reviews to save time across workflows.
• Shift compliance left by embedding checks into CI/CD and exploring AI-assisted policy enforcement.

Skills

Python

SQL

AWS

Dashboarding

CI/CD

IaC

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

OPA/Rego

GitHub

Job description

United States Digital Space LLC is seeking a senior GRC Engineer to own the GRC Engineering function and shape an automated, scalable compliance program. You will design the foundational data models, pipelines, and evidence framework across SOC 2, ISO, and NIST, while delivering real-time risk visibility and scalable controls.

You will implement continuous controls monitoring, automate evidence collection, and drive data-informed risk assessments across security, risk, and engineering teams,