Remote Security GRC Engineer | SOC2 & ISO 27001 Expert

BairesDev; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

100% remote work

Flexible hours

Paid parental leave

Global mentorship and growth

Job summary

BairesDev is seeking a Security GRC Engineer to design, implement, and maintain enterprise governance, risk, and compliance programs. You will collaborate with cross-functional teams to integrate regulatory requirements into SDLC and coordinate audits.

The role requires 4+ years in Security GRC or related fields, with hands-on experience in SOC2, ISO 27001, HIPAA, and PCI. 100% remote work with flexible hours and global collaboration opportunities are offered.

Qualifications

• Experience in designing and implementing governance, risk and compliance programs.
• Proven ability to map controls to regulatory requirements and align with software development lifecycles.
• Strong written and verbal communication skills with ability to coordinate audits.

Responsibilities

• Design, implement, and maintain enterprise security policies and procedures aligned with SOC2 and ISO 27001.
• Conduct comprehensive risk assessments and mitigate threats across the infrastructure.

Skills

Policy writing

Risk assessment

Governance & compliance

English proficiency

Education

Bachelor's degree in Information Security

Tools

SOC 2

ISO 27001

HIPAA

PCI DSS

Job description

BairesDev is seeking a Security GRC Engineer to design, implement, and maintain enterprise governance, risk, and compliance programs. You will collaborate with cross-functional teams to integrate regulatory requirements into SDLC and coordinate audits.

The role requires 4+ years in Security GRC or related fields, with hands-on experience in SOC2, ISO 27001, HIPAA, and PCI. 100% remote work with flexible hours and global collaboration opportunities are offered.