Remote GRC Engineer: Compliance & Cloud Controls

Insight Global; Woonsocket (RI); Remote; USD 62,000 - 69,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

HSA/FSA/DCFSA options

401k with employer match

Paid time off

Job summary

Insight Global is seeking a GRC Engineer to design, modernize, and operationalize controls for SOX, SOC, PCI, HITRUST, and NIST 800-53. You will automate evidence collection for cloud-native systems and DevSecOps, translating complex regulatory requirements into scalable controls.

You will partner with engineering, security architects, and audit teams to drive audit readiness, dashboards, and metrics while improving compliance tooling and collaboration with IT and Legal.

Qualifications

• 7+ years of software engineering or software development experience in modern architectures.
• 7+ years of technical project leadership experience in cross-functional teams.
• 5+ years in internal audit, external assessments, risk management, regulatory compliance, or information security.
• 5+ years with audit methodologies, internal control frameworks, risk assessments, and control testing.

Responsibilities

• Design, implement, and operationalize regulatory controls for SOX, SOC 1/2, PCI, HITRUST, and NIST 800-53.
• Automate evidence collection and testing for cloud-native platforms, AI/ML, and DevSecOps.
• Collaborate with IT, security, and business partners to ensure alignment and transparency across the compliance program.

Skills

Software engineering

Project leadership

Regulatory compliance

Audit testing

Cloud security

Cloud platforms

Education

Bachelor's degree

Certifications (CCSK/CCSP/CISSP/CRISC)

Job description

Insight Global is seeking a GRC Engineer to design, modernize, and operationalize controls for SOX, SOC, PCI, HITRUST, and NIST 800-53. You will automate evidence collection for cloud-native systems and DevSecOps, translating complex regulatory requirements into scalable controls.

You will partner with engineering, security architects, and audit teams to drive audit readiness, dashboards, and metrics while improving compliance tooling and collaboration with IT and Legal.