Remote Staff Security Engineer, GRC & Compliance Leader

ezCater; Boston, Northern (MA, KY); Hybrid; USD 165,000 - 210,000; Full time

Job summary

ezCater is seeking a Staff Security Engineer, GRC to mature governance, risk, compliance, and data security across our SaaS and cloud environment. You will expand control monitoring, automate evidence collection, and embed security practices into day-to-day engineering.

The role requires 8+ years in security GRC, familiarity with ISO-27001, NIST CSF, SOC 2, PCI-DSS, and a bias toward automated, observable controls. Boston hybrid work is available with a strong emphasis on collaboration.

Qualifications

• 8+ years in security GRC, compliance, risk, or security program work in SaaS or cloud-native environments.
• Strong experience with ISO-27001, NIST CSF, SOC 2, ITGC, and PCI-DSS.
• Ability to automate or instrument parts of a compliance program with scripting, APIs, dashboards.

Responsibilities

• Design and mature an auditable control framework for ezCater’s SaaS, cloud, data, and engineering environment.
• Build continuous control monitoring and automate testing, evidence collection, and compliance workflows.
• Expand data security policy and governance with clear, enforceable standards tied to technical practices.
• Improve operational quality, remediation coordination, and audit readiness across teams.

Skills

GRC experience

Security program

Automation

AI governance

Policy-as-Code

Cloud security

Tools

Terraform

AWS

GitHub

Job description

ezCater is seeking a Staff Security Engineer, GRC to mature governance, risk, compliance, and data security across our SaaS and cloud environment. You will expand control monitoring, automate evidence collection, and embed security practices into day-to-day engineering.

The role requires 8+ years in security GRC, familiarity with ISO-27001, NIST CSF, SOC 2, PCI-DSS, and a bias toward automated, observable controls. Boston hybrid work is available with a strong emphasis on collaboration.