Senior GRC Engineer - Automate Compliance & Security

Cloud Software Group; San Ramon (CA); On-site; USD 160,000 - 241,000; Full time

Job summary

Cloud Software Group seeks a Senior GRC Technical Engineer to implement and operate the organization's GRC program, focusing on technology, cybersecurity, compliance, and risk management. You will translate requirements into practical controls while collaborating with Engineering, Product, IT, Legal, Privacy, and Audit teams.

You will drive automated monitoring, vulnerability awareness, and third-party risk management, ensuring strong governance across SOC 2, ISO 27001, PCI DSS, and more.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business, or a related field.
• 5+ years of experience in cybersecurity, GRC, security engineering, compliance, IT risk, audit, or a related discipline.
• Experience working with technical and security teams in a technology, SaaS, cloud, or enterprise environment.
• Practical experience with frameworks such as ISO 27001, SOC 2, NIST, PCI DSS, FedRAMP, CMMC, ISO 42001, ISO 27701, HIPAA, or similar standards.

Responsibilities

• Identify opportunities to automate GRC processes and reduce email-based evidence collection.
• Support automated control monitoring and continuous compliance capabilities.
• Explore AI and agentic technologies to improve evidence collection, control validation, risk analysis, and reporting.
• Partner with technical teams to integrate security and compliance data from enterprise systems into GRC platforms.
• Maintain accurate and reliable GRC data, documentation, control libraries, and reporting.
• Leverage GRC, security, cloud, vulnerability management, IAM, and other platforms to improve compliance operations.
• Support design, implementation, and operation of GRC programs across security, privacy, technology, and compliance requirements.
• Translate regulatory requirements into technical and operational control requirements.
• Partner with Engineering, Product, IT, Cloud, Infrastructure, and Security teams to understand how controls are implemented.
• Support compliance programs and assessments across frameworks such as SOC 2, ISO 27001, ISO 27701, ISO 42001, PCI DSS, FedRAMP, CMMC, HIPAA, and others.
• Develop knowledge of Vulnerability Management, IAM/PAM, Third-Party Risk, security awareness, security assessments, and security operations.
• Help translate Corporate Security activities into compliance evidence and control outcomes.
• Build relationships with control owners, Engineering, Product, IT, Security, Legal, Privacy, Finance, Sales, and business units.
• Act as a trusted advisor to stakeholders, not just a compliance reviewer.
• Influence stakeholders across the organization and balance security, compliance, and business priorities.

Skills

GRC experience

Cybersecurity fundamentals

Stakeholder management

Security controls

Strong communication

Education

Bachelor's degree in Cybersecurity/IT/CS/Risk Management/Business

Tools

ServiceNow GRC

Archer

OneTrust

AuditBoard

Drata

Vanta

Job description

Cloud Software Group seeks a Senior GRC Technical Engineer to implement and operate the organization's GRC program, focusing on technology, cybersecurity, compliance, and risk management. You will translate requirements into practical controls while collaborating with Engineering, Product, IT, Legal, Privacy, and Audit teams.

You will drive automated monitoring, vulnerability awareness, and third-party risk management, ensuring strong governance across SOC 2, ISO 27001, PCI DSS, and more.