GRC Security Engineer — Remote (US/Canada)

CyberJob; United States; Remote; USD 123,000 - 172,000; Full time

Benefits offered by this job

RSU program

Retirement matching

Paid volunteer days

Remote-first work environment

Job summary

1Password is seeking a Security Engineer on the Governance, Risk, and Compliance (GRC) team to scale programs supporting audits, federal compliance, risk management, vendor risk, and policy management. You will translate complex requirements into practical controls and measurable improvements while partnering across Security, Engineering, Legal, and Privacy.

You’ll explore how AI can enhance GRC workflows, build reliable AI-assisted processes, and ensure validation and human judgment remain

Qualifications

• Three+ years of experience in security, compliance, risk, audit, GRC, or related technical discipline.
• Ability to manage moderately complex cross-functional compliance initiatives with strong ownership.
• Experience applying security/compliance frameworks (SOC 2, ISO 27001, NIST 800-53, FedRAMP, PCI DSS).

Responsibilities

• Manage GRC initiatives spanning commercial and federal compliance, security risk, vendor risk, policy management, and customer trust.
• Support planning, assessment preparation, remediation, and continuous monitoring for FedRAMP, CMMC, and NIST 800-53.
• Collaborate with control owners, Security, Engineering, Legal, Privacy, and auditors to gather evidence and close gaps.
• Define and improve evidence generation, validation, mapping to requirements, storage, and traceability.

Skills

Security

GRC

Program management

Cross-functional coordination

Compliance frameworks

Tools

Drata

Tines

Vanta

ServiceNow

Archer

LogicGate

Secureframe

Job description

1Password is seeking a Security Engineer on the Governance, Risk, and Compliance (GRC) team to scale programs supporting audits, federal compliance, risk management, vendor risk, and policy management. You will translate complex requirements into practical controls and measurable improvements while partnering across Security, Engineering, Legal, and Privacy.

You’ll explore how AI can enhance GRC workflows, build reliable AI-assisted processes, and ensure validation and human judgment remain