Remote GRC Engineer (Mexico) | Audits & Compliance

Gainsight; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Gainsight is seeking a full-time GRC Engineer to join our Security team, reporting to the Director of Security. This remote role is based in Mexico and requires strong experience in governance, risk, and compliance frameworks.

You’ll maintain control frameworks, support internal and external audits, assess third-party risk, and automate evidence collection, collaborating with Security, Engineering, IT, and Legal to stay audit-ready.

Qualifications

• 5+ years in GRC, security compliance, IT audit, or risk management in SaaS/cloud environments.
• Familiarity with SOC 2, ISO 27001, and NIST; ability to map controls across frameworks.
• Experience supporting external audits and assessments, including scoping, evidence collection, walkthroughs, remediation.

Responsibilities

• Maintain multiple control frameworks and map controls to standards
• Track control ownership and health
• Meet with control owners to address gaps in controls
• Scope audits for internal and external audits
• Work with auditors through the audit process from kick-off to completion
• Collect and review evidence for all frameworks to ensure compliance and traceability
• Track audit findings and remediations to completion
• Perform security reviews of all Third-Parties and Vendors
• Track vendor remediation items and maintain the vendor inventory
• Draft, update, and maintain all security policies, procedures, and standards regularly
• Answer customer security questionnaires and requests
• Support customer audits and provide compliance documentation where required
• Manage the risk register including exceptions, acceptance, expiry
• Build and maintain integrations and automation for evidence collection and control monitoring
• Work with engineering teams to align technical controls to business requirements

Skills

GRC frameworks

Audit & risk management

Security compliance

Communication

Cross-functional collaboration

Tools

GRC tools

Automation scripting

Workflow automation

Job description

Gainsight is seeking a full-time GRC Engineer to join our Security team, reporting to the Director of Security. This remote role is based in Mexico and requires strong experience in governance, risk, and compliance frameworks.

You’ll maintain control frameworks, support internal and external audits, assess third-party risk, and automate evidence collection, collaborating with Security, Engineering, IT, and Legal to stay audit-ready.