Remote GRC Cybersecurity Engineer II

Ensemble Health Partners; Blue Ash (OH); On-site; USD 84,000 - 132,000; Full time

Benefits offered by this job

Remote work

Job summary

Ensemble Health Partners is seeking an Engineer II, Cybersecurity (GRC Engineer) to manage the cybersecurity risk register and automate control monitoring across cloud, on‑prem, and enterprise environments. The role emphasizes audit evidence collection and ongoing compliance.

You will collaborate with security, engineering, and business teams to translate risk into actionable remediation, drive automation, and ensure readiness for regulatory and third‑party audits while traveling as needed.

Qualifications

• Associate degree or equivalent in cybersecurity/IT
• 3–5 years in cybersecurity, information security, governance, risk management, or related disciplines
• Experience with security frameworks, governance processes, and technical controls in enterprise environments
• Familiarity with audit support, control assessments, and compliance documentation

Responsibilities

• Own and maintain the cybersecurity risk register and report on risks
• Design, implement, and maintain automated control monitoring and evidence collection
• Assist with incident response from a governance, risk, and compliance perspective
• Support investigations and corrective/remediation actions for improper activity
• Respond to GRC incidents and service requests within SLAs
• Collaborate with engineering to remediate control deficiencies and improve automation

Skills

Governance

Risk assessment

GRC programs

Cloud security

Automation

Audits

Incident response

Education

Associate Degree in Cybersecurity

Job description

Ensemble Health Partners is seeking an Engineer II, Cybersecurity (GRC Engineer) to manage the cybersecurity risk register and automate control monitoring across cloud, on‑prem, and enterprise environments. The role emphasizes audit evidence collection and ongoing compliance.

You will collaborate with security, engineering, and business teams to translate risk into actionable remediation, drive automation, and ensure readiness for regulatory and third‑party audits while traveling as needed.