Senior GRC Security Engineer - Remote Eligible

Portage Ventures GP Inc.; Indiana; Remote; USD 150,000 - 230,000; Full time

Job summary

Alan is seeking a senior GRC professional to own governance and risk across the platform, establishing a clear framework for certifications and regulatory obligations. You will collaborate with Engineering and Legal to protect data and enable scalable operations.

You will coach a junior GRC engineer, drive AI risk considerations, and maintain a living control map across multiple countries with remote work flexibility.

Qualifications

• 6+ years in security with real GRC ownership.
• Experience running a GRC roadmap in certified or regulated environments (ISO 27001, HDS, SOC 2 or similar).
• Comfort working with certification auditors and explaining framework requirements.
• Ability to assess risks and prioritize mitigations over policy writing.
• Fluent in French and English.

Responsibilities

• Own governance and risk across the company with a single framework.
• Map and Prioritize security risks, including AI risks, into actionable plans.
• Define controls framework and standards across teams; ensure board awareness.
• Lead incident governance, business continuity and disaster recovery.
• Collaborate with engineering early in design to close control gaps.

Skills

GRC ownership

ISO 27001

SOC 2

Regulatory compliance

Risk management

French & English

Audits

Job description

Alan is seeking a senior GRC professional to own governance and risk across the platform, establishing a clear framework for certifications and regulatory obligations. You will collaborate with Engineering and Legal to protect data and enable scalable operations.

You will coach a junior GRC engineer, drive AI risk considerations, and maintain a living control map across multiple countries with remote work flexibility.