Senior GRC Engineer: Audit-Ready Controls & Cloud

A-LIGN; United States; On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Healthcare benefits

Dental & Vision

401(k) with match

Paid time off

Certification reimbursement

Home office stipend

Life and Disability insurance

Employee Assistance Program

Job summary

A-LIGN is seeking a Senior GRC Engineer to own audit evidence collection and validate controls across FedRAMP, ISO, SOC 2, and NIST. You will work hands-on with GCP, GitHub, and Microsoft 365, coordinating with IT, DevOps, and engineering to maintain continuous audit readiness.

The role emphasizes cloud and security controls, collaboration, and automation, with opportunities to influence risk management and AI safeguards.

Qualifications

• Bachelor's degree or equivalent in information systems, cybersecurity, or related field.
• 5+ years in information security, GRC, IT audit, or compliance engineering.
• Experience collecting audit evidence and validating controls in FedRAMP, ISO, SOC 2, or NIST.
• Experience with GRC platforms and evidence automation (AuditBoard, Vanta, Drata).

Responsibilities

• Own end-to-end audit evidence collection and validation across multiple frameworks.
• Maintain and verify technical controls in GCP, GitHub, and Microsoft 365/Entra ID.
• Liaise between the GRC and technical teams to reduce audit burden.
• Support FedRAMP continuous monitoring and 3PAO requests.
• Develop evidence automation integrating GRC tooling with source systems.
• Prepare audit-ready evidence packages for external assessors.
• Monitor control health and drive remediation.

Skills

Cross-functional collaboration

Project management

Written communication

AI automation

Audit evidence collection

Scripting (Python/PowerShell)

GRC tooling

Education

Bachelor's degree in information systems, cybersecurity, business, or equivalent

Tools

AuditBoard

Vanta

Drata

Job description

A-LIGN is seeking a Senior GRC Engineer to own audit evidence collection and validate controls across FedRAMP, ISO, SOC 2, and NIST. You will work hands-on with GCP, GitHub, and Microsoft 365, coordinating with IT, DevOps, and engineering to maintain continuous audit readiness.

The role emphasizes cloud and security controls, collaboration, and automation, with opportunities to influence risk management and AI safeguards.