Senior GRC Engineer — AI‑Driven, Remote

6Sense; Northern (KY); Hybrid; USD 141,000 - 180,000; Full time

Benefits offered by this job

Health insurance

401K matching

Stock options

Paid time off

Job summary

6sense is seeking a Senior Security Engineer in Governance, Risk and Compliance (GRC) to build automated control monitoring, evidence collection, and AI-native workflows. The role strengthens security governance and risk management across ISO 27001, SOC 2, GDPR, PCI, SOX, and NIST frameworks while partnering with Platform Engineering, DevOps, and IT.

The engineer will write production-grade code (Python) under CI/CD, automate evidence from AWS sources, and enable control owners to self-serve.

Qualifications

• 5+ years of experience in a GRC or similar team.
• 2+ years of hands-on automation experience (Python) and CI/CD.
• Hands-on AWS experience: Config, Security Hub, CloudTrail, IAM, Lambda, EventBridge, S3.
• Experience with APIs, SQL, data normalization and reconciliation.
• Experience applying AI/LLMs to workflows with human-review guardrails.

Responsibilities

• Design, build, and own automated security control monitoring with production-quality code.
• Define technical signals, test frequency, thresholds, and alerting paths.
• Engineer self-service evidence collection in AWS services.
• Redesign GRC processes to be AI-native with guardrails and human-in-the-loop review.
• Lead internal and external audit engagements with automated evidence as primary artifact.

Skills

Automation experience

Python

AWS familiarity

GRC knowledge

Communication

Education

Bachelor's degree

Security certifications

Tools

Python

AWS Config

S3/Athena

CI/CD pipelines

SQL

Job description

6sense is seeking a Senior Security Engineer in Governance, Risk and Compliance (GRC) to build automated control monitoring, evidence collection, and AI-native workflows. The role strengthens security governance and risk management across ISO 27001, SOC 2, GDPR, PCI, SOX, and NIST frameworks while partnering with Platform Engineering, DevOps, and IT.

The engineer will write production-grade code (Python) under CI/CD, automate evidence from AWS sources, and enable control owners to self-serve.