Senior GRC Engineer: Cloud Security & Compliance

Cloud Software Group; San Ramon (CA); On-site; USD 160,000 - 240,000; Full time

Benefits offered by this job

Healthcare benefits

401(k) match

Career development

Job summary

Cloud Software Group seeks a Senior GRC Technical Engineer to implement and operate its GRC program, focusing on technology, cybersecurity, compliance, and risk management. You will translate requirements into practical controls and work with Engineering, Product, IT, Legal, and Privacy teams to strengthen security posture.

The role covers vulnerability management, IAM/PAM, third-party risk, security assessments, and operations, aligning with SOC 2, ISO 27001 and other standards.

Qualifications

• Bachelor's degree in cybersecurity, IT, CS, risk management or related field.
• 5+ years in cybersecurity, GRC, security engineering, compliance, IT risk, audit or related.
• Experience coordinating with technical and security teams in SaaS/cloud environments.
• Strong understanding of security controls, risk management and compliance frameworks.
• Ability to translate regulatory and contractual requirements into technical and operational controls.

Responsibilities

• Identify opportunities to automate GRC processes and reduce spreadsheet-based evidence collection.
• Support automated control monitoring and continuous compliance capabilities.
• Explore AI and agentic technologies to improve evidence collection, control validation and reporting.
• Integrate security and compliance data from enterprise systems into GRC platforms.
• Maintain accurate GRC data, documentation, and control libraries.

Skills

GRC

Cybersecurity

Security engineering

Compliance

IT risk

Audit

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

ServiceNow GRC

Archer

OneTrust

AuditBoard

Drata

Vanta

AWS/Azure/GCP

Job description

Cloud Software Group seeks a Senior GRC Technical Engineer to implement and operate its GRC program, focusing on technology, cybersecurity, compliance, and risk management. You will translate requirements into practical controls and work with Engineering, Product, IT, Legal, and Privacy teams to strengthen security posture.

The role covers vulnerability management, IAM/PAM, third-party risk, security assessments, and operations, aligning with SOC 2, ISO 27001 and other standards.