GRC Engineer - Risk & Compliance Specialist

Wilson Sonsini Goodrich & Rosati; Palo Alto (CA); On-site; USD 117,000 - 158,000; Full time

Benefits offered by this job

Discretionary year-end bonus

Job summary

Wilson Sonsini is seeking a mid-level GRC Engineer to support governance, risk, and compliance initiatives in Palo Alto. You will map controls to NIST requirements, manage risk and compliance artifacts, and collaborate with security operations to improve risk posture.

Lead efforts in CSF alignment, risk reporting, and third-party risk assessments. A background in IT security and cloud security, plus relevant certifications, will help you excel.

Qualifications

• 3+ years of experience in security risk, governance, and compliance (GRC).
• Knowledge of the NIST Cybersecurity Framework and NIST SP 800-53.
• Understanding of IT fundamentals, including networking, identity and access management, and cloud security.
• Excellent written and verbal communication skills to explain risk to technical and non-technical audiences.
• Bachelor’s degree or equivalent in information security/IT, risk management, or related field.
• Certifications such as Security+, CISA, CRISC preferred.

Responsibilities

• Align CSF framework and map controls to NIST requirements, perform gap analyses and self-assessments.
• Maintain risk registers and coordinate remediation status with teams.
• Support ServiceNow implementation: requirements, testing, workflow input.
• Identify critical/high-risk systems and document risk profiles.
• Prepare periodic risk, compliance, and service-level metrics for leadership.
• Conduct third-party risk assessments and security questionnaires.

Skills

GRC experience

NIST CSF

IT networking

Cloud security

Communication

Project management

Education

Bachelor's degree in IT/security

Certifications preferred

Tools

ServiceNow

RSA Archer

SIEM (Splunk)

Job description

Wilson Sonsini is seeking a mid-level GRC Engineer to support governance, risk, and compliance initiatives in Palo Alto. You will map controls to NIST requirements, manage risk and compliance artifacts, and collaborate with security operations to improve risk posture.

Lead efforts in CSF alignment, risk reporting, and third-party risk assessments. A background in IT security and cloud security, plus relevant certifications, will help you excel.