Senior Security GRC Engineer

About the role

Believe is looking for a Senior Security GRC Engineer to embed governance, risk and compliance practices into a fast‑moving tech environment. You will work closely with engineering, product, auditors and security teams to turn risk management into practical, automated guardrails that support agile delivery.

Key responsibilities

• Run lightweight, continuous risk assessments and threat‑modeling sessions with product and engineering teams.
• Translate risk findings into clear impact, likelihood, trade‑off analyses and recommended actions; track remediation plans and provide simple reporting.
• Maintain and evolve security policies and standards, ensuring they are concise, actionable and adopted across CI/CD pipelines, cloud services, SaaS solutions and identity management.
• Support audits and evidence collection, aligning the program with recognized frameworks such as NIST while promoting “compliance‑as‑code” through automated checks.
• Lead third‑party risk assessments, drive follow‑ups, and implement scalable vendor risk processes (tiering, questionnaires, measurable requirements).
• Create playbooks, templates and self‑service material; coach teams to understand risk early in the delivery lifecycle.

Required profile

• Proven experience in GRC, risk or compliance within a technology‑focused organization (security, cloud, SaaS, engineering).
• Strong understanding of core security concepts, especially identity and access management.

Required skills

• NIST framework
• CI/CD pipeline security
• Cloud platforms (e.g., AWS, Azure, GCP)
• SaaS security controls
• Identity management
• Risk assessment & threat modeling
• Audit support & evidence collection
• Vendor risk management

What we offer

• Opportunity to shape security governance in a global, fast‑growing company.
• Collaborative environment with cross‑functional teams.
• Access to cutting‑edge technology and industry‑leading partners.