Senior GRC Engineer

J.D. Power; California; Remote; USD 140,000 - 165,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Disability insurance

Life insurance

Retirement plan

Paid time off

Wellness program

Job summary

JD Power is seeking a Senior GRC Engineer to lead governance, risk, and compliance initiatives across enterprise frameworks. This role focuses on SOC 2, TISAX, and DORA audits with fixed deadlines and visibility to customers and the board.

You will drive remediation and maintain control frameworks, advancing from reactive compliance to proactive risk management while partnering with leadership and external auditors.

Qualifications

• 7+ years in GRC, audit, or compliance engineering roles with demonstrated success managing parallel engagements.
• Deep hands-on experience with SOC 2, ISO 27001, and enterprise audit processes.
• Proficiency with GRC platforms (ServiceNow, Archer, AuditBoard, or equivalent).
• Strong technical understanding of IT controls, security frameworks, and risk methodologies.
• Excellent communication skills for audit coordination, exception tracking, and board-level reporting.
• Experience developing metrics and dashboards that communicate risk posture to executive leadership.

Responsibilities

• Lead SOC 2, TISAX, and DORA audit remediation efforts with fixed deadlines and stakeholder visibility.
• Manage enterprise risk assessment and risk treatment processes, including risk register maintenance and acceptance reviews.
• Direct audit evidence collection, control documentation, finding resolution, and audit coordination across all frameworks.
• Develop and maintain governance metrics, KRIs, and reporting dashboards visible to customers and board.
• Build and evolve the organization's control frameworks aligned with customer and regulatory requirements.
• Manage Plan of Action and Milestones (POAM) tracking and vulnerability remediation governance.
• Coordinate with business units, executives, and audit partners on compliance obligations and risk reporting.

Skills

GRC

Audit

Compliance

Risk management

SOC 2

ISO 27001

Executive reporting

GRC platforms

Education

CISSP

CISM

CRISC

Tools

ServiceNow

Archer

AuditBoard

Job description

Job Description:

Job Title: Senior GRC Engineer

Location:Remote | USA, Canada

Reports to: Cybersecurity Governance Manager

Employment Type: Full-time

This is a new vacancy

About the Role:

Senior GRC Engineer to lead governance, risk, and compliance initiatives across enterprise frameworks. This role is critical as the organization faces active audit cycles for SOC 2, TISAX, and DORA compliance, with findings visible to customers and the board. You will drive audit remediation with fixed deadlines, maintain control frameworks, and ensure stakeholder confidence through transparent governance and metrics.

You will reduce the audit remediation backlog from months to weeks, establish sustainable compliance processes, and become the trusted advisor to both internal leadership and external auditors. Success means audit findings visible to customers are resolved on schedule, governance metrics are accurate and trusted, and the organization transitions from reactive compliance to proactive risk management.

In this role, you will:

• Lead SOC 2, TISAX, and DORA audit remediation efforts with fixed deadlines and stakeholder visibility
• Manage enterprise risk assessment and risk treatment processes, including risk register maintenance and acceptance reviews
• Direct audit evidence collection, control documentation, finding resolution, and audit coordination across all frameworks
• Develop and maintain governance metrics, KRIs, and reporting dashboards visible to customers and board
• Build and evolve the organization's control frameworks aligned with customer and regulatory requirements
• Manage Plan of Action and Milestones (POAM) tracking and vulnerability remediation governance
• Coordinate with business units, executives, and audit partners on compliance obligations and risk reporting

Required Qualifications:

• 7+ years in GRC, audit, or compliance engineering roles with demonstrated success managing parallel engagements
• Deep hands-on experience with SOC 2, ISO 27001, and enterprise audit processes
• Proficiency with GRC platforms (ServiceNow, Archer, AuditBoard, or equivalent)
• Strong technical understanding of IT controls, security frameworks, and risk methodologies
• Excellent communication skills for audit coordination, exception tracking, and board-level reporting
• Experience developing metrics and dashboards that communicate risk posture to executive leadership

Preferred Qualifications:

• CISSP, CISM, or CRISC certification
• Experience with DORA, PCI DSS 4.0, or EU regulatory frameworks
• Background in B2B SaaS compliance and customer audit programs
• Experience managing multiple concurrent audit frameworks and regulatory examinations

Compensation and Benefits

This position has a starting salary range of $120,000 - $145,000 CAD / $140,000 - $165,000 USD per year. The range represents what we reasonably and in good faith expect to pay for the role at the time of posting. An employee's pay within the range is determined by a number of factors, including relevant skills, education, qualifications, experience, performance, business or organizational needs, and geographic location.

Eligible employees may participate in medical, dental, vision, disability, life insurance, retirement savings programs, paid time off, wellness programs, and other company-sponsored benefits. Benefits vary by country and employment status.

Why Join JD Power

* We power our customers' success. Everything we do is focused on helping customers make better decisions and achieve better outcomes.

* We are innovative, collaborative, and grounded in data. We combine advanced analytics with human expertise to deliver insight that holds up in the real world.

* We make things easy. We turn complexity into clarity so teams can act faster and with confidence.

* We get it done. We focus on execution, accountability, and results.

* We start with trust and prove it every day. Independence, integrity, and credibility are the foundation of our work.

Equal Opportunity & Accommodations

JD Power is committed to employing a diverse workforce. Qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, gender expression, veteran status, or disability. JD Power is committed to providing reasonable accommodations throughout the recruitment process for individuals with disabilities or other protected needs under applicable local laws. Please contact [e-mail] for accommodation request.

Data Privacy

JD Power does not disclose your personal data to unauthorized third parties. However, as a global corporation consisting of multiple affiliated companies in various countries, JD Power has international sites and JD Power uses resources located throughout the world. JD Power may from time to time also use third parties to act on JD Power's behalf. You agree to the fact that to the extent necessary your personal data may be transferred and/or disclosed to any company within JD Power group of companies as well as to third parties acting on JD Power's behalf, including also transfers to servers and databases outside the country where you provided JD Power with your personal data. Such transfers may include for example transfers and/or disclosures outside the European Economic Area and in the United States of America. If you are a California or United Kingdom resident, additional disclosures about the information we collect and how we use that information can be found by clicking here.

Applications

Candidates must be legally authorized to work in the country where employment is offered. JD Power does not provide employment sponsorship for this position.

This position is posted exclusively on https://www.jdpower.com/business/careers and select trusted job boards such as LinkedIn or Indeed. All official communication comes from email addresses ending in @jdpower.com or @jdpa.com. We may take additional steps to verify candidate information to protect the integrity of our recruitment process.