Senior GRC Security Engineer AI-Driven Compliance Architect

SportsTechJobs; United States; Presencial; USD 150.000 - 170.000; Tempo integral

Resumo da vaga

Playlist is seeking a Senior GRC Engineer to own the technical spine of control environments across PCI DSS, SOC 1 Type II, ISO 27001, HITRUST and NIST CSF/800-53. You will design crosswalks, manage the Master Control List, and drive automation with AI-powered GRC tooling for a multi-brand footprint.

You will partner with Security Engineering, Legal, and Finance to translate complex compliance into concrete engineering guidance and scalable implementations that endure audits and evolving

Qualificações

• 6+ years in security, GRC, or compliance engineering.
• Deep working knowledge of PCI DSS, SOC 1/2, HITRUST, and at least ISO 27001 or NIST CSF/800-53.
• Experience designing or maintaining control frameworks, crosswalks, or unified control architectures.
• Hands-on experience managing evidence requirements and control implementation, not just documentation.
• Experience building or operating AI workflows (LLM-based pipelines, multi-agent systems) is a plus.

Responsabilidades

• Design and build crosswalks and control mappings across PCI DSS, SOC 1/2, ISO 27001, HITRUST, and NIST CSF/800-53.
• Own the Master Control List end-to-end, including control nomenclature, relational DB architecture, evidence linkages, and maintenance.
• Manage the full lifecycle of controls, evidence requirements, and implementation as new standards are adopted.
• Drive evidence automation in GRC tooling, building scalable collection workflows.
• Collaborate with Security Engineering, Legal, and Finance to translate requirements into engineering guidance.

Conhecimentos

GRC

Security engineering

Audit readiness

Compliance

AI workflows

Ferramentas

Optro

Drata

Hyperproof

Anecdotes

Descrição da vaga

Playlist is seeking a Senior GRC Engineer to own the technical spine of control environments across PCI DSS, SOC 1 Type II, ISO 27001, HITRUST and NIST CSF/800-53. You will design crosswalks, manage the Master Control List, and drive automation with AI-powered GRC tooling for a multi-brand footprint.

You will partner with Security Engineering, Legal, and Finance to translate complex compliance into concrete engineering guidance and scalable implementations that endure audits and evolving