Remote Senior GRC Engineer | SOC 2, ISO 27001, DORA

JD Power; United States; A distancia; USD 140.000 - 165.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical, dental, vision insurance

Retirement savings programs

Paid time off

Wellness programs

Descripción de la vacante

JD Power seeks a Senior GRC Engineer to lead governance, risk, and compliance initiatives across enterprise frameworks, focusing on SOC 2, TISAX, and DORA with remediation deadlines and transparent reporting.

You will maintain control frameworks, KRIs, and dashboards visible to customers and the board, driving proactive risk management and auditable governance. Remote work across the USA and Canada is supported.

Formación

• 7+ years in GRC, audit, or compliance engineering roles.
• Deep hands-on experience with SOC 2, ISO 27001, and enterprise audit processes.
• Proficiency with GRC platforms (ServiceNow, Archer, AuditBoard, or equivalent).
• Strong technical understanding of IT controls, security frameworks, and risk methodologies.
• Excellent communication skills for audit coordination, exception tracking, and board-level reporting.
• Experience developing metrics and dashboards that communicate risk posture to executive leadership.

Responsabilidades

• Lead SOC 2, TISAX, and DORA audit remediation efforts with fixed deadlines and stakeholder visibility.
• Manage enterprise risk assessment and risk treatment processes, including risk register maintenance and acceptance reviews.
• Direct audit evidence collection, control documentation, finding resolution, and audit coordination across all frameworks.
• Develop and maintain governance metrics, KRIs, and reporting dashboards visible to customers and board.
• Build and evolve the organization's control frameworks aligned with customer and regulatory requirements.
• Manage Plan of Action and Milestones (POAM) tracking and vulnerability remediation governance.

Conocimientos

GRC & audit management

Audit coordination & board reporting

Risk assessment & metrics

Herramientas

ServiceNow

Archer

AuditBoard

Descripción del empleo

JD Power seeks a Senior GRC Engineer to lead governance, risk, and compliance initiatives across enterprise frameworks, focusing on SOC 2, TISAX, and DORA with remediation deadlines and transparent reporting.

You will maintain control frameworks, KRIs, and dashboards visible to customers and the board, driving proactive risk management and auditable governance. Remote work across the USA and Canada is supported.