GRC Security Engineer | AI-Driven, Remote

1Password; United States; Remote; USD 123,000 - 172,000; Full time

Benefits offered by this job

Health benefits

401k matching

Paid time off

Job summary

1Password is seeking a Security Engineer on the Governance, Risk, and Compliance (GRC) team. You will build and scale programs for commercial and federal compliance, security risk, vendor risk, policy management and customer trust.

Collaborate across Security, Engineering, Legal, Privacy and other teams to turn complex requirements into practical controls and measurable improvements. You will identify opportunities for AI‑enhanced workflows in GRC and risk tasks, delivering reliable, validated

Qualifications

• Three+ years of experience in security, compliance, risk, audit, GRC or related technical discipline.
• Experience managing moderately complex, cross‑functional compliance or security initiatives with strong ownership and follow‑through.
• Knowledge of security/compliance frameworks such as SOC 2, ISO 27001, NIST 800‑53, CMMC, FedRAMP or PCI DSS.
• Familiarity with authorization boundaries, POA&Ms, continuous monitoring, 3PAO coordination, or remediation.
• Ability to translate framework requirements into control activities, policies, procedures and evidence workflows.

Responsibilities

• Manage GRC initiatives across commercial and federal compliance, security risk, vendor risk and policy management.
• Support planning, assessment preparation, remediation and continuous monitoring for FedRAMP, CMMC, NIST 800‑53 and related programs.
• Collaborate with control owners, Security, Legal, Privacy, auditors and business stakeholders to gather evidence and close gaps.
• Define and improve evidence generation, validation, mapping to requirements, storage and traceability.
• Monitor control health, evidence freshness, configuration drift, exceptions and remediation progress.
• Build automated and AI‑assisted workflows to reduce manual effort and improve reliability of GRC processes.

Skills

GRC experience

Tools

Drata

Tines

Vanta

ServiceNow

Archer

LogicGate

Secureframe

Job description

1Password is seeking a Security Engineer on the Governance, Risk, and Compliance (GRC) team. You will build and scale programs for commercial and federal compliance, security risk, vendor risk, policy management and customer trust.

Collaborate across Security, Engineering, Legal, Privacy and other teams to turn complex requirements into practical controls and measurable improvements. You will identify opportunities for AI‑enhanced workflows in GRC and risk tasks, delivering reliable, validated