Senior GRC Engineer: Lead SOC 2 & DORA Compliance (Remote)

J.D. Power; Lansing (MI); Remote; USD 140,000 - 165,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Disability insurance

Life insurance

Retirement savings programs

Paid time off

Wellness programs

Job summary

JD Power is seeking a Senior GRC Engineer to lead governance, risk, and compliance initiatives across enterprise frameworks. The role requires hands-on experience with SOC 2, ISO 27001 and risk management, with a focus on audit remediation and board reporting.

You will develop governance metrics, KRIs, and control frameworks, manage POAM tracking, and coordinate with executives and audit partners to ensure timely remediation and proactive risk management across the organization.

Qualifications

• 7+ years in GRC, audit or compliance engineering.
• Hands-on with SOC 2, ISO 27001 and enterprise audit processes.
• Experience with GRC platforms and audit coordination.

Responsibilities

• Lead SOC 2, TISAX, and DORA remediation efforts with fixed deadlines and visibility to stakeholders.
• Manage enterprise risk assessment and risk treatment processes.
• Direct audit evidence collection, control documentation, finding resolution, and audit coordination across frameworks.
• Develop and maintain governance metrics, KRIs, and reporting dashboards visible to customers and board.
• Build and evolve control frameworks aligned with customer and regulatory requirements.
• Manage POAM tracking and vulnerability remediation governance.
• Coordinate with business units, executives, and audit partners on compliance obligations and risk reporting.

Skills

GRC governance

Audit management

Stakeholder communication

Risk assessment

Education

CISSP/CISM/CRISC

Tools

ServiceNow

Archer

AuditBoard

Job description

JD Power is seeking a Senior GRC Engineer to lead governance, risk, and compliance initiatives across enterprise frameworks. The role requires hands-on experience with SOC 2, ISO 27001 and risk management, with a focus on audit remediation and board reporting.

You will develop governance metrics, KRIs, and control frameworks, manage POAM tracking, and coordinate with executives and audit partners to ensure timely remediation and proactive risk management across the organization.