Senior GRC Engineer - Remote Audit & Compliance Lead

J.D. Power; Michigan; Hybrid; USD 140,000 - 165,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Disability insurance

Life insurance

Retirement plan

Paid time off

Wellness programs

Job summary

JD Power seeks a Senior GRC Engineer to lead governance, risk, and compliance initiatives across enterprise frameworks. The role focuses on SOC 2, TISAX, and DORA audits with remediation deadlines and transparent governance.

You will drive mitigation efforts, maintain control frameworks, and report risk to leaders and auditors. The ideal candidate brings 7+ years in GRC roles, deep audit experience, and hands-on knowledge of SOC 2, ISO 27001, and GRC tools.

Qualifications

• 7+ years in GRC, audit, or compliance engineering roles with demonstrated success managing parallel engagements.
• Deep hands-on experience with SOC 2, ISO 27001, and enterprise audit processes.
• Proficiency with GRC platforms (ServiceNow, Archer, AuditBoard, or equivalent).
• Strong technical understanding of IT controls, security frameworks, and risk methodologies.
• Excellent communication skills for audit coordination, exception tracking, and board-level reporting.
• Experience developing metrics and dashboards that communicate risk posture to executive leadership.

Responsibilities

• Lead SOC 2, TISAX, and DORA audit remediation efforts with fixed deadlines and stakeholder visibility
• Manage enterprise risk assessment and risk treatment processes, including risk register maintenance and acceptance reviews
• Direct audit evidence collection, control documentation, finding resolution, and audit coordination across all frameworks
• Develop and maintain governance metrics, KRIs, and reporting dashboards visible to customers and board
• Build and evolve the organization’s control frameworks aligned with customer and regulatory requirements
• Manage Plan of Action and Milestones (POAM) tracking and vulnerability remediation governance
• Coordinate with business units, executives, and audit partners on compliance obligations and risk reporting

Skills

GRC experience

SOC 2

ISO 27001

Audit coordination

Risk management

Governance metrics

Tools

ServiceNow

Archer

AuditBoard

Job description

JD Power seeks a Senior GRC Engineer to lead governance, risk, and compliance initiatives across enterprise frameworks. The role focuses on SOC 2, TISAX, and DORA audits with remediation deadlines and transparent governance.

You will drive mitigation efforts, maintain control frameworks, and report risk to leaders and auditors. The ideal candidate brings 7+ years in GRC roles, deep audit experience, and hands-on knowledge of SOC 2, ISO 27001, and GRC tools.