Senior GRC Engineer: Audit Readiness & Cloud Controls

Align Technology; United States; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Life and Health Insurance

Bonus Structure

Home Office Reimbursement

Technology Allowance

Certification Reimbursement

Loyalty Program

Career Coaching

Paid Time Off

Office Closure

Job summary

A‑LIGN is the leading provider of cybersecurity compliance programs, seeking a Senior GRC Engineer to own audit evidence collection across FedRAMP, ISO, SOC 2, and NIST. You will work closely with IT, DevOps, and security teams to keep certifications audit-ready.

You will drive evidence automation across GRC tooling and cloud environments (GCP, GitHub, Entra ID), support continuous monitoring, risk assessments, and external assessor interactions while reducing audit burden.

Qualifications

• 5+ years in information security, GRC, IT audit, or compliance engineering.
• Hands-on audit evidence collection for FedRAMP, ISO 27001, ISO 42001, SOC 2, NIST 800-53, NIST 800-171.
• DevSecOps or cloud engineering to extract evidence from GCP, GitHub, and Microsoft 365/Entra ID.
• Experience with GRC platforms and evidence automation (AuditBoard, Vanta, Drata).
• Experience supporting external audits and assessor interactions (3PAO).
• Knowledge of vulnerability management, CI/CD pipelines, IaC, and IAM concepts.
• Scripting/automation for evidence collection preferred (Python/PowerShell).
• Familiarity with risk assessment methodologies and threat modeling.

Responsibilities

• Own end-to-end audit evidence collection across FedRAMP, ISO, SOC 2, and NIST.
• Maintain and verify technical controls in GCP, GitHub, and Entra ID.
• Coordinate between GRC and IT/Engineering/DevOps to reduce audit burden.
• Support FedRAMP continuous monitoring activities, including KSI evidence, scans, and 3PAO requests.
• Build evidence automation linking GRC tooling to source systems and workflows.
• Support ISO 42001 AI Management System (AIMS) evidence, AI risk registers, and nonconformity tracking.
• Prepare audit-ready evidence packages and coordinate with external assessors and certification bodies.
• Monitor control health and drive remediation with owners before findings.

Skills

Cross-functional collaboration

Translate requirements

Highly organized

Written communication

Self-directed

AI tooling

Fast-paced environment

Education

Bachelor's degree in information systems, cybersecurity, business

Tools

AuditBoard

Vanta

Drata

Job description

A‑LIGN is the leading provider of cybersecurity compliance programs, seeking a Senior GRC Engineer to own audit evidence collection across FedRAMP, ISO, SOC 2, and NIST. You will work closely with IT, DevOps, and security teams to keep certifications audit-ready.

You will drive evidence automation across GRC tooling and cloud environments (GCP, GitHub, Entra ID), support continuous monitoring, risk assessments, and external assessor interactions while reducing audit burden.