Remote GRC Engineer: Build Controls & Audit Readiness

Coterie Insurance; United States; À distance; USD 115 000 - 140 000; Plein temps

Avantages offerts par ce poste

100% remote

Health insurance through Aetna

Dental and vision insurance through Gu

Life insurance

FSA or HSA access

401K with 4% match

Flexible PTO up to 4 weeks

Résumé du poste

Coterie Insurance is seeking a GRC Engineer to help build, test, and improve governance, risk, and compliance controls. You will conduct control testing, validate evidence, and support audit activities across SOC 2, NYDFS, and related standards.

The role emphasizes automation, data-driven testing, and partnering with control owners to implement effective remediation and compensating controls. This is a fully remote position within the United States.

Qualifications

• 4+ years in IT audit, GRC, information security, or related disciplines.
• Experience testing security controls and supporting audits (SOC 2, SOX/ITGC, ISO 27001, NYDFS, NIST).
• Strong understanding of security control domains (IAM, logging, vulnerability management, cloud security, change management).
• Ability to independently retrieve, interpret, and validate technical evidence from systems (configurations, logs, reports).
• Knowledge of SQL, KQL, and PowerShell for querying and validating data used in control testing.

Responsabilités

• Build and maintain repeatable testing and monitoring for security, technology, and application controls.
• Define testing procedures, evidence requirements, frequency, and criteria.
• Perform control testing and document results and conclusions.
• Identify control failures, gaps, drift, and risk impact; collaborate with owners for remediation.
• Automate evidence collection, control testing, and continuous monitoring via queries, scripts, APIs, and tooling.
• Retrieve evidence directly from applications and source systems for audits and assessments.
• Validate completeness and accuracy of system-generated evidence used for testing and audits.
• Support SOC 2, ITGC/SOX readiness, NYDFS, and other audits and regulatory activities.

Connaissances

IT audit

GRC

information security

risk management

audits/assessments

control testing

security controls

Outils

SQL

KQL

PowerShell

Description du poste

Coterie Insurance is seeking a GRC Engineer to help build, test, and improve governance, risk, and compliance controls. You will conduct control testing, validate evidence, and support audit activities across SOC 2, NYDFS, and related standards.

The role emphasizes automation, data-driven testing, and partnering with control owners to implement effective remediation and compensating controls. This is a fully remote position within the United States.