Senior GRC Engineer: Automate Compliance & Evidence (Remote)

Smartsheet; Bellevue (WA); Remote; USD 145,000 - 194,000; Full time

Benefits offered by this job

Employer subsidized medical/vision and

Dental coverage

401k Match

Monthly stipend

Flexible Time Away Program

Sick Time Off

Paid holidays

Parental Leave

Udemy access

Personal Smartsheet account

Teleworking options

Job summary

Smartsheet is seeking a Sr. Security Engineer I to automate control monitoring, build evidence pipelines, and reduce audit-season scramble within a GRC program.

You’ll work hands-on with the GRC platform, cloud, and identity tooling, partnering with engineering teams to translate compliance requirements into actionable code. You will collaborate across SOC 2, ISO 27001/27017/27701, and HIPAA, shaping an engineer-friendly experience and embedding controls into existing pipelines.

Qualifications

• 4+ years of experience in GRC engineering, security engineering, compliance automation, or IT audit support.
• Hands-on ownership of at least one full certification cycle (SOC 2, ISO 27001, or similar).
• Experience configuring integrations and building evidence pipelines with GRC/automation tools.
• Familiarity with cloud security fundamentals (IAM, logging, encryption) and cross‑framework mapping.

Responsibilities

• Own control automation for SOC 2, ISO 27001/27017/27701, HIPAA, and related frameworks.
• Translate compliance requirements into technical control logic and workflows.
• Design engineer-facing compliance experiences with self-service status and CI/CD integrations.
• Support audits end-to-end: respond to requests, maintain evidence library, track remediations.
• Build dashboards and reporting for real-time control health and audit readiness.

Skills

GRC engineering

Security engineering

Compliance automation

Scripting

Tools

Vanta

Drata

Secureframe

Jira

GRC platform

Job description

Smartsheet is seeking a Sr. Security Engineer I to automate control monitoring, build evidence pipelines, and reduce audit-season scramble within a GRC program.

You’ll work hands-on with the GRC platform, cloud, and identity tooling, partnering with engineering teams to translate compliance requirements into actionable code. You will collaborate across SOC 2, ISO 27001/27017/27701, and HIPAA, shaping an engineer-friendly experience and embedding controls into existing pipelines.