Remote GRC Engineer: Controls & Audit Automation

Coterie; United States; Remote; USD 115,000 - 140,000; Full time

Benefits offered by this job

Remote work

Health insurance

Dental & Vision insurance

Life insurance

FSA/HSA

401K with match

Flexible PTO

12 holidays

Job summary

Coterie's GRC team seeks a GRC Engineer to build, test, and improve how we manage and validate security, technology, and compliance controls. This hands-on role focuses on continuous control monitoring, evidence collection from source systems, and risk evaluation.

You will identify gaps, recommend remediation, and support broader GRC initiatives including privacy, risk management, and program priorities. 100% remote work with strong benefits and annual salary guidance across national data.

Qualifications

• 4+ years of IT audit, GRC, information security, security assurance, technology risk, or related disciplines.
• Hands-on experience testing technical security and technology controls and supporting audits or assessments (SOC 2, SOX/ITGC, ISO 27001, NYDFS, NIST).
• Strong understanding of security control domains (IAM, logging, vulnerability, cloud security, change mgmt, SDLC).
• Ability to retrieve, interpret, and validate technical evidence (configurations, logs, reports).
• SQL, KQL, PowerShell or similar tools for querying and validating data.

Responsibilities

• Build and maintain repeatable testing and monitoring processes for controls.
• Define testing procedures, evidence requirements, frequency, results, and exceptions.
• Perform control testing and document results and conclusions.
• Identify control failures, gaps, drift, and risks; propose remediation or compensating controls.
• Automate evidence collection, testing, and monitoring using queries, scripts, and integrations.
• Retrieve evidence from applications and source systems for audits and assessments.
• Validate completeness and accuracy of system-generated evidence.
• Support SOC 2, ITGC/SOX readiness, NYDFS, and other audits and compliance activities.

Skills

Control testing

Audit readiness

Risk assessment

Independent work

Tools

SQL

KQL

PowerShell

Job description

Coterie's GRC team seeks a GRC Engineer to build, test, and improve how we manage and validate security, technology, and compliance controls. This hands-on role focuses on continuous control monitoring, evidence collection from source systems, and risk evaluation.

You will identify gaps, recommend remediation, and support broader GRC initiatives including privacy, risk management, and program priorities. 100% remote work with strong benefits and annual salary guidance across national data.