Security GRC Engineering Lead - Remote/OC

Lorien; United States; Remote; USD 165,000 - 240,000; Full time

Job summary

Lorien in Orange, CA is hiring a Governance, Risk, and Compliance Engineering Lead to drive the GRC program and build a scalable automation framework. You will set roadmaps, guide an expanding team, and translate frameworks into automated validations across cloud and on-prem systems.

Ideal candidates have 6+ years in security engineering or GRC, strong coding skills, and experience with Terraform/AWS CDK and key GRC platforms. Onsite in Orange County or fully remote option available.

Qualifications

• 6+ years of hands-on experience in security engineering or GRC
• Solid coding skills in at least one general-purpose programming language (Go, Python, or Rust)
• Background working with security data lakes, log aggregation systems, or building queryable data marts
• Direct, hands-on experience putting compliance frameworks into practice (CMMC, NIST 800-171, 800-53, FedRAMP, SOC 2)
• Comfortable operating independently, taking ownership of undefined problems, and building consensus across partner teams
• Familiarity with continuous control monitoring tools or GRC platforms (Vanta, Drata, Hyperproof, OneTrust)
• Production-level experience with infrastructure-as-code tooling (Terraform, AWS CDK)
• 6+ years in security engineering, GRC, or adjacent role with automation experience
• Knowledge of STIG/ConMon scanning, CSPM tooling, or Kubernetes hardening
• Experience architecting data collection across cloud/SaaS (APIs, log/event pipelines, data lakes)
• Demonstrated history of guiding technical direction and mentoring engineering talent
• Experience in fast-moving defense technology environments
• Must qualify to obtain and hold a U.S. Secret-level security clearance

Responsibilities

• Set the technical roadmap for the function and coach an expanding engineering team
• Establish the technical foundation of the GRC program, engineering the pipeline and tooling for audit-ready evidence
• Convert regulatory frameworks (CMMC, NIST 800-171, FedRAMP/IL5) into automated validations
• Develop the pipeline that gathers evidence across internal systems and aligns it to a standardized control model
• Create the authoritative system of record for controls, mappings, and evidence, guiding build-versus-buy decisions
• Identify control drift and escalate findings with remediation paths
• Design reusable collectors and schemas to simplify onboarding of new controls

Skills

Go

Python

Rust

Security data lakes

Data pipelines

Mentoring

APIs

Kubernetes hardening

Tools

Vanta

Drata

Hyperproof

OneTrust

Terraform

AWS CDK

Job description

Lorien in Orange, CA is hiring a Governance, Risk, and Compliance Engineering Lead to drive the GRC program and build a scalable automation framework. You will set roadmaps, guide an expanding team, and translate frameworks into automated validations across cloud and on-prem systems.

Ideal candidates have 6+ years in security engineering or GRC, strong coding skills, and experience with Terraform/AWS CDK and key GRC platforms. Onsite in Orange County or fully remote option available.