Senior GRC Technical Engineer

Cloud Software Group, LLC; San Ramon (CA); On-site; USD 160,000 - 241,000; Full time

Job summary

Cloud Software Group is seeking a Senior GRC Technical Engineer to lead the implementation and operation of our GRC program. This hands-on role focuses on aligning technology, cybersecurity, compliance, and risk management to drive practical, automated controls across the organization.

The candidate will collaborate with Engineering, Product, IT, Corporate Security, Legal, Privacy, Internal Audit, and business stakeholders to strengthen security posture, automate evidence collection, and monitor

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business, or a related field.
• 5+ years of experience in cybersecurity, GRC, security engineering, compliance, IT risk, audit, or related discipline.
• Experience working with technical and security teams in a technology, SaaS, cloud, or enterprise environment.
• Strong understanding of cybersecurity principles, security controls, risk management, and compliance frameworks.
• Experience with frameworks such as ISO 27001, SOC 2, NIST, PCI DSS, FedRAMP, CMMC, ISO 42001, ISO 27701, HIPAA, or similar standards.

Responsibilities

• Identify opportunities to automate manual GRC processes and reduce reliance on spreadsheets and email-based evidence collection.
• Support implementation of automated control monitoring and continuous compliance capabilities.
• Explore AI and agentic technologies to improve evidence collection, control validation, risk analysis, reporting, and compliance operations.
• Partner with technical teams to integrate security and compliance data from enterprise systems into GRC platforms.
• Maintain accurate and reliable GRC data, documentation, control libraries, and reporting.
• Leverage GRC, security, cloud, vulnerability management, IAM, and other technology platforms to improve compliance operations.
• Support the design, implementation, and ongoing operation of GRC programs across security, privacy, technology, and compliance requirements.
• Translate regulatory, contractual, and industry-standard requirements into technical and operational control requirements.
• Partner with Engineering, Product, IT, Cloud, Infrastructure, and Security teams to understand how controls are implemented within technology environments.

Skills

5+ years

Analytical skills

Communication

Influence stakeholders

Fast-paced environment

Cloud platforms

GRC platforms

Education

Bachelor's degree

Tools

ServiceNow GRC

Archer

OneTrust

AuditBoard

Drata

Vanta

AWS

Azure

GCP

Job description

As aSenior GRC Technical Engineer, you will play a key role in implementing and operating the organization's Governance, Risk, and Compliance (GRC) program, with a strong focus on the intersection oftechnology, cybersecurity, compliance, and risk management.

This role is ideal for a technically strong security professional who understands how security controls are implemented in real-world technology environments and can translate technical requirements into practical compliance outcomes. The individual will work closely with Engineering, Product, IT, Corporate Security, Legal, Privacy, Internal Audit, and business stakeholders to drive compliance, manage risk, and strengthen the organization's overall security posture.

The role will also provide exposure to and collaboration withCorporate Security functions, including vulnerability management, identity and access management, third-party risk, security assessments, and security operations.

Key Responsibilities

• Identify opportunities to automate manual GRC processes and reduce reliance on spreadsheets and email-based evidence collection.
• Support implementation of automated control monitoring and continuous compliance capabilities.
• Explore the use ofAI and agentic technologiesto improve evidence collection, control validation, risk analysis, reporting, and compliance operations.
• Partner with technical teams to integrate security and compliance data from enterprise systems into GRC platforms.
• Maintain accurate and reliable GRC data, documentation, control libraries, and reporting.
• Leverage GRC, security, cloud, vulnerability management, IAM, and other technology platforms to improve compliance operations.
• Support the design, implementation, and ongoing operation of GRC programs across security, privacy, technology, and compliance requirements.
• Translate regulatory, contractual, and industry-standard requirements intotechnical and operational control requirements.
• Partner with Engineering, Product, IT, Cloud, Infrastructure, and Security teams to understand how controls are implemented within technology environments.
• Support compliance programs and assessments across frameworks such asSOC 2, ISO 27001, ISO 27701, ISO 42001, PCI DSS, FedRAMP, CMMC, IRAP, HIPAA, HITRUST, and other applicable standards.
• Develop working knowledge of areas such asVulnerability Management, IAM/PAM, Third-Party Risk Management, security awareness/phishing, security assessments, and security operations.
• Help translate Corporate Security activities and technical security capabilities into compliance evidence and control outcomes.
• Build and maintain strong relationships with control owners, Engineering, Product, IT, Security, Legal, Privacy, Finance, Sales, and business-unit stakeholders.
• Act as atrusted advisor rather than simply a compliance reviewer, helping stakeholders understand the intent behind security and compliance requirements.
• Influence stakeholders across the organization without relying on direct authority.
• Understand competing business priorities and help balance security, compliance, operational efficiency, and business objectives.

Qualifications & Experience

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business, or a related field.
• 5+ years of experiencein cybersecurity, GRC, security engineering, compliance, IT risk, audit, or a related discipline.
• Demonstrated experience working withtechnical and security teamsin a technology, SaaS, cloud, or enterprise environment.
• Strong understanding of cybersecurity principles, security controls, risk management, and compliance frameworks.
• Practical experience with one or more frameworks such asISO 27001, SOC 2, NIST, PCI DSS, FedRAMP, CMMC, ISO 42001, ISO 27701, HIPAA, or similar standards.
• Experience performing control assessments, risk assessments, security reviews, audit preparation, or technical compliance activities.
• Experience working with security technologies or programs such asIAM/PAM, vulnerability management, cloud security, endpoint security, third-party risk, or security operationsis highly desirable.
• Ability to understand technical architecture, security controls, system configurations, and engineering processes sufficiently to evaluate compliance and risk.
• Strong analytical and problem-solving skills with the ability to investigate complex issues and determine appropriate solutions.
• Excellent written and verbal communication skills.
• Demonstrated ability to build strong relationships and influence stakeholders across technical and business functions.
• Comfortable working in a fast-paced environment with changing priorities and multiple concurrent initiatives.

Preferred Qualifications

• Professional certification such asCISA, CRISC, CISSP, Security+, ISO 27001 Lead Auditor/Implementer, or equivalent.
• Experience with GRC platforms such as ServiceNow GRC, Archer, OneTrust, AuditBoard, Drata, Vanta, or similar platforms.
• Experience with cloud platforms such as AWS, Azure, or GCP.
• Experience with security technologies such as Wiz, Tenable, Qualys, BeyondTrust, IAM/PAM platforms, or equivalent.
• Experience supporting customer security questionnaires and security assurance activities.
• Experience working with external auditors, certification bodies, customers, or regulatory assessors.
• Experience with compliance automation, continuous control monitoring, or security data integrations.
• Familiarity with AI governance and emerging frameworks such asISO 42001 and NIST AI RMF

Compensation may vary depending on your location, qualifications including job-related education, training, experience, licensure, and certification, that could result at a level outside of these ranges. Certain roles are eligible for additional rewards, including annual bonus, and sales incentives depending on the terms of the applicable plan and role as well as individual performance.

CA generally ranges: $160,489-$240,734

All other locations fall under our General State range: $140,780-$211,170

Benefits may vary depending on the nature of your employment with Cloud Software Group and the country where you work. U.S. based employees are typically offered access to healthcare, life insurance and disability benefits, 401(k) plan and company match, among others.

About Us

Cloud Software Group is one of the world's largest cloud solution providers, serving more than 100 million users around the globe. When you join Cloud Software Group, you are making a difference for real people, each of whom count on our suite of cloud-based products to get work done - from anywhere. Members of our team will tell you that we value passion for technology and the courage to take risks. Everyone is empowered to learn, dream, and build the future of work. We are on the brink of another Cambrian leap -- a moment of immense evolution and growth. And we need your expertise and experience to do it. Now is the perfect time to move your skills to the cloud.

Cloud Software Group is firmly committed to Equal Employment Opportunity (EEO) and to compliance with all federal, state and local laws that prohibit employment discrimination. All qualified applicants will receive consideration for employment without regard to age, race, color, creed, sex or gender, sexual orientation, gender identity, gender expression, ethnicity, national origin, ancestry, citizenship, religion, genetic carrier status, disability, pregnancy, childbirth or related medical conditions (including lactation status), marital status, military service, protected veteran status, political activity or affiliation, taking or requesting statutorily protected leave and other protected classifications.

Cloud Software Group will consider qualified applicants with a criminal history and conduct the recruiting process in accordance with the California Fair Chance Act, Los Angeles County Fair Chance Ordinance for Employers and San Diego Fair Chance Ordinance. For access to the laws see the following links:California FCAandLos Angeles FCO.

If you need a reasonable accommodation due to a disability during any part of the application process, please contact us via the Bridge portal for assistance.