Senior Cybersecurity GRC Engineer

About the role

We are looking for a Senior Cybersecurity GRC Engineer to embed governance, risk and compliance practices into our fast‑moving technology organization. You will work closely with engineering, product, auditors and security teams to turn risk into actionable guardrails that support agile delivery.

Key responsibilities

• Run lightweight, continuous risk assessments and threat‑modeling with product and engineering squads.
• Translate risk findings into clear impact, likelihood, trade‑off analyses and recommended remediation actions.
• Maintain and evolve short, actionable security policies and standards that align with CI/CD, cloud, SaaS and identity workflows.
• Support internal and external audits, collect evidence efficiently and align the program with frameworks such as NIST.
• Develop “compliance‑as‑code” solutions, including automated checks and continuous evidence collection.
• Lead third‑party risk assessments, drive vendor tiering, questionnaires and measurable requirements.
• Create playbooks, templates and self‑service material to enable teams to embed security early in delivery.

Required profile

• Proven experience in GRC, risk or compliance within a technology‑focused environment (cloud, SaaS, engineering).
• Strong understanding of security fundamentals, especially identity and access management.
• Hands‑on experience with risk assessment, threat modeling and remediation tracking.
• Ability to work collaboratively with cross‑functional teams and influence without creating friction.

Required skills

• Risk assessment and threat modeling
• Identity and Access Management (IAM)
• Cloud security (AWS, Azure, GCP)
• SaaS security controls
• CI/CD pipeline security
• NIST framework implementation
• Compliance‑as‑code tooling
• Vendor risk management