Remote Senior GRC Engineer: Cloud Controls

A-LIGN; Northern (KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Healthcare benefits

Life Insurance

Disability Insurance

Employee Assistance Program

Pet Insurance

401(k) Plan with Employer Matching

Home Office Reimbursement

Certification Reimbursement

Personalized Career Coaching

Paid Time Off

Vacation Bonus

Summer Hours

Job summary

A-LIGN is seeking a Senior GRC Engineer to own audit evidence collection and maintain technical controls across FedRAMP, ISO, SOC 2, and NIST frameworks. You will work hands-on in GCP, GitHub, and Microsoft 365 to gather evidence, verify control implementations, and keep clients audit-ready.

You will collaborate with IT, Engineering, and DevOps to reduce audit burden, support continuous monitoring, risk assessments, threat modeling, and AI safeguards, while ensuring accuracy and timely responses

Qualifications

• Bachelor's degree or equivalent in information systems, cybersecurity, business, or related field.

Responsibilities

• Own end-to-end audit evidence collection and validation across multiple frameworks.
• Maintain and verify technical controls in cloud and enterprise environments.
• Serve as liaison between GRC and technical teams to reduce audit burden.
• Support continuous monitoring, vulnerability artifacts, and POA&M tracking.
• Build evidence automation linking GRC tooling to source systems.

Education

Bachelor's degree in information systems, cybersecurity, business, or equivalent combination of education and experience

Tools

GCP

GitHub

Microsoft 365/Entra ID

Job description

A-LIGN is seeking a Senior GRC Engineer to own audit evidence collection and maintain technical controls across FedRAMP, ISO, SOC 2, and NIST frameworks. You will work hands-on in GCP, GitHub, and Microsoft 365 to gather evidence, verify control implementations, and keep clients audit-ready.

You will collaborate with IT, Engineering, and DevOps to reduce audit burden, support continuous monitoring, risk assessments, threat modeling, and AI safeguards, while ensuring accuracy and timely responses