GRC Product Owner & Framework Automation Lead

Allen Recruitment; California (MO); On-site; USD 110,000 - 150,000; Full time

Job summary

Allen Recruitment is seeking a GRC Analyst / Product Owner & Framework Engineer for a security and compliance software company. The role focuses on integrating security frameworks, refining control mappings, and building automation to simplify compliance with SOC 2, ISO 27001, GDPR and other standards.

Ideal candidates will have experience building security programs from scratch, strong knowledge of major frameworks, and scripting skills to automate updates and validate processes within

Qualifications

• Hands-on experience understanding and working with ISO 27001, SOC 2, GDPR, HIPAA, and ISO 42001 frameworks.
• Ability to evaluate control frameworks, identify gaps, and craft rationalization strategies.
• Experience mapping controls across frameworks to spot overlaps and enable automation.
• Basic scripting to automate updates and validate compliance via code.
• Comfort with reading and editing JSON/configuration files for control libraries and scripts.

Responsibilities

• Analyze and integrate multiple cybersecurity frameworks into client platform.
• Refine and maintain control libraries and mappings for cross-framework compatibility.
• Develop automation solutions to streamline compliance processes.

Skills

Security compliance knowledge

Framework development

Control mapping

Scripting & automation

JSON & configuration management

Programming (Python)

GRC SaaS experience

Education

Bachelor’s degree in information security, CS or related field

Job description

Allen Recruitment is seeking a GRC Analyst / Product Owner & Framework Engineer for a security and compliance software company. The role focuses on integrating security frameworks, refining control mappings, and building automation to simplify compliance with SOC 2, ISO 27001, GDPR and other standards.

Ideal candidates will have experience building security programs from scratch, strong knowledge of major frameworks, and scripting skills to automate updates and validate processes within