Remote GRC Cybersecurity Engineer II

Ensemble Health Partners; United States; On-site; USD 84,000 - 132,000; Full time

Job summary

Ensemble Health Partners seeks an Engineer II, Cybersecurity (GRC Engineer) to manage the cybersecurity risk register, automate controls, and support audit readiness across cloud, infrastructure, and enterprise tech. You will partner with security, engineering, and business stakeholders to translate technical risk into actionable business recommendations.

The role emphasizes reducing manual compliance through automation, maintaining documentation, and ensuring ongoing regulatory alignment.

Qualifications

• 3 to 5 years of experience in cybersecurity, information security, governance, risk management, compliance, IT audit, or related disciplines.
• Experience supporting cybersecurity risk management programs, compliance initiatives, audits, and security control assessments.
• Experience working with security frameworks, governance processes, and technical controls in enterprise environments.
• Preferred certifications include CompTIA Security+, CRISC, CISA; other relevant cybersecurity, risk, audit, or compliance certifications may be considered.

Responsibilities

• Own and maintain the cybersecurity risk register, including identifying, assessing, tracking, quantifying, and reporting cybersecurity risks.
• Differentiate meaningful business risks from theoretical compliance gaps and provide practical remediation recommendations.
• Support incident response activities from a governance, risk, and compliance perspective, ensuring proper documentation, audit evidence collection, and reporting throughout the incident lifecycle.
• Assist with investigations of suspected improper activity and recommend corrective and remediation actions.
• Respond to GRC‑related incidents and service requests within established service level agreements (SLAs).
• Design, implement, and maintain automated control monitoring and evidence collection processes to reduce manual audit activities and support continuous compliance.
• Participate in technology and IT initiatives to evaluate systems and processes against applicable regulatory and security frameworks before implementation.
• Provide governance, risk, compliance, and control integration requirements for new projects and technologies.
• Ensure infrastructure, cloud, and security control changes align with established security frameworks and CIS benchmarks.
• Collaborate with engineering teams to identify and remediate control deficiencies and compliance gaps.
• Identify opportunities to improve operational efficiencies through automation and process optimization.
• Maintain compliance documentation, including risk assessments, control narratives, policies, procedures, and audit evidence repositories.
• Partner with cybersecurity analysts, architects, engineers, and business stakeholders to ensure effective security controls are implemented across enterprise systems, cloud platforms, and IT environments.
• Support regulatory, audit, and compliance initiatives while maintaining audit readiness across the organization.
• Demonstrate customer obsession, innovation, and operational excellence in support of organizational goals and compliance objectives.

Skills

GRC program administration

Cybersecurity risk assessment

Security control design

Compliance framework management

Audit evidence collection

Third-party risk management

CIS Benchmarks

Collaboration across teams

Communication of risks

Analytical problem-solving

Innovation openness (AI)

Education

Associate Degree in Cybersecurity

Job description

Ensemble Health Partners seeks an Engineer II, Cybersecurity (GRC Engineer) to manage the cybersecurity risk register, automate controls, and support audit readiness across cloud, infrastructure, and enterprise tech. You will partner with security, engineering, and business stakeholders to translate technical risk into actionable business recommendations.

The role emphasizes reducing manual compliance through automation, maintaining documentation, and ensuring ongoing regulatory alignment.