Security GRC Engineer - Remote Work | REF#297524

BairesDev; United States; À distance; USD 120 000 - 180 000; Plein temps

Avantages offerts par ce poste

100% remote work

Flexible hours

Paid parental leave

Global mentorship and growth

Résumé du poste

BairesDev is seeking a Security GRC Engineer to design, implement, and maintain enterprise governance, risk, and compliance programs. You will collaborate with cross-functional teams to integrate regulatory requirements into SDLC and coordinate audits.

The role requires 4+ years in Security GRC or related fields, with hands-on experience in SOC2, ISO 27001, HIPAA, and PCI. 100% remote work with flexible hours and global collaboration opportunities are offered.

Qualifications

• Experience in designing and implementing governance, risk and compliance programs.
• Proven ability to map controls to regulatory requirements and align with software development lifecycles.
• Strong written and verbal communication skills with ability to coordinate audits.

Responsabilités

• Design, implement, and maintain enterprise security policies and procedures aligned with SOC2 and ISO 27001.
• Conduct comprehensive risk assessments and mitigate threats across the infrastructure.

Connaissances

Policy writing

Risk assessment

Governance & compliance

English proficiency

Formation

Bachelor's degree in Information Security

Outils

SOC 2

ISO 27001

HIPAA

PCI DSS

Description du poste

At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.

Security GRC Engineer at BairesDev

As a Security GRC Engineer, you will be responsible for the development and maintenance of the organization's governance, risk, and compliance posture. You will act as a key liaison between technical teams and regulatory requirements, ensuring that our systems and processes align with global security standards and industry best practices.

What You’ll Do

• Design, implement, and maintain enterprise security policies and procedures aligned with frameworks like SOC2 and ISO 27001.
• Conduct comprehensive risk assessments to identify, evaluate, and mitigate potential security threats across the infrastructure.
• Coordinate and facilitate internal and external audits, serving as the primary point of contact for compliance evidence collection.
• Map security controls to various regulatory requirements to ensure continuous compliance and operational transparency.
• Collaborate with cross-functional teams to integrate compliance requirements into the software development and deployment lifecycle.
• Develop and monitor key performance indicators (KPIs) to measure the effectiveness of the security governance program.

What We Are Looking For

• 4+ years of experience in Security GRC, Compliance, or Information Security.
• Proven expertise in implementing and managing compliance frameworks such as SOC2, ISO 27001, HIPAA, and PCI.
• Proficiency in conducting risk assessments and control mapping across enterprise environments.
• Hands-on experience in policy writing and supporting internal and external audit processes.
• Strong background in governance and risk management within a technology-focused organization.
• Advanced proficiency in English.

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and national holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.

Join a global team where your unique talents can truly thrive and make a significant impact!