Remote Senior GRC & Security Engineer — Automate Compliance

engineeringjobs.net, Inc.; Town of Montana (WI); Hybrid; USD 175,000 - 228,000; Full time

Benefits offered by this job

Health insurance

401(k) match

Paid holidays

Teleworking options

Job summary

engineeringjobs.net, Inc. seeks a Commercial GRC Engineer - Sr. Security Engineer in the United States to automate governance, risk and compliance across cloud, identity, endpoint and SaaS environments.

You will translate requirements into technical controls, embed them into CI/CD pipelines, and enable engineers with self-service compliance tooling and dashboards. Significant ownership of frameworks like SOC 2, ISO 27001/27017/27701 and HIPAA is expected.

Qualifications

• 4+ years of experience in GRC engineering, security engineering, compliance automation, IT audit support, or related field.
• Hands-on ownership of at least one complete certification cycle such as SOC 2 or ISO 27001.
• Experience configuring integrations and building evidence pipelines with GRC platforms.
• Strong understanding of cloud security fundamentals (AWS, GCP, Azure) and IAM, logging, encryption.

Responsibilities

• Own control automation for SOC 2 and ISO/HIPAA frameworks by designing automated evidence collection.
• Translate compliance requirements into technical control logic and integrate into pipelines.
• Embed controls into architecture and development workflows to shift compliance left.
• Build engineer-facing compliance experiences and dashboards for visibility into control health.
• Support audit cycles end-to-end by coordinating evidence requests and remediation tracking.

Skills

GRC engineering

Security engineering

Compliance automation

Python

JavaScript

Documentation

Stakeholder management

Tools

Vanta

Drata

Secureframe

Job description

engineeringjobs.net, Inc. seeks a Commercial GRC Engineer - Sr. Security Engineer in the United States to automate governance, risk and compliance across cloud, identity, endpoint and SaaS environments.

You will translate requirements into technical controls, embed them into CI/CD pipelines, and enable engineers with self-service compliance tooling and dashboards. Significant ownership of frameworks like SOC 2, ISO 27001/27017/27701 and HIPAA is expected.