GRC Engineer I (Special Programs)

Accountabilities:

• Execute end-to-end client security and compliance initiatives aligned with frameworks such as SOC 2, ISO 27001, and NIST CSF.
• Manage a portfolio of active client accounts and serve as a primary point of contact throughout engagements.
• Guide clients through compliance initiatives, maintaining strong communication, trust, and accountability from kickoff through delivery.
• Author, maintain, and update cybersecurity policies, standard operating procedures, control documentation, and evidence repositories.
• Coordinate evidence collection, compliance milestones, project deliverables, and task execution across multiple concurrent engagements.
• Conduct control testing, readiness reviews, and structured compliance assessments to identify gaps and maintain alignment with applicable requirements.
• Identify, assess, and track cybersecurity risks and control deficiencies in collaboration with technical and business stakeholders.
• Partner with IT, security, operations, and other cross-functional teams to develop and execute remediation plans.
• Communicate directly with client stakeholders through email, chat, and video meetings to gather evidence, clarify requirements, resolve issues, and provide progress updates.
• Handle client escalations with professionalism, urgency, and a solutions-oriented approach.
• Coordinate effectively with analysts and other delivery team members to ensure engagement milestones and quality standards are met.
• Contribute to improving delivery processes, templates, playbooks, and standard operating procedures.
• Support the scaling of GRC service delivery by identifying opportunities for greater consistency, efficiency, and automation.
• Adapt quickly to changing priorities, customer requirements, and specialized compliance engagements.
• Participate in client and team meetings while maintaining a high standard of confidentiality and professionalism.

Requirements:

• Hands-on experience delivering cybersecurity compliance or GRC initiatives within technology-focused environments.
• Practical experience working with at least one major framework such as SOC 2, ISO 27001, or NIST CSF.
• Experience managing multiple compliance or cybersecurity projects simultaneously while maintaining organization, quality, and delivery momentum.
• Demonstrated ability to communicate directly with U.S.-based clients and other international stakeholders in a professional, customer-focused manner.
• Strong understanding of cybersecurity policies, controls, evidence management, and the policy lifecycle.
• Practical experience authoring, implementing, maintaining, or enforcing enterprise security policies and control requirements.
• Familiarity with compliance automation or GRC platforms such as Vanta or comparable solutions.
• Additional knowledge of regulatory and compliance frameworks such as GDPR, HIPAA, or PCI DSS is preferred.
• Relevant professional certifications such as ISO 27001 Lead Implementer, CISA, Security+, or comparable credentials are preferred.
• Strong written and verbal English communication skills, with the ability to communicate effectively with both technical and executive audiences.
• Excellent organizational and project management skills, with strong attention to detail and the ability to manage competing priorities.
• Demonstrated analytical, problem-solving, and risk-management capabilities.
• Strong stakeholder management and relationship-building skills, with a client-first approach to service delivery.
• Ability to work effectively in a high-velocity startup environment where priorities and client needs can change quickly.
• Reliable high-speed internet connection and a professional home-office environment suitable for confidential conversations and uninterrupted remote collaboration.
• Willingness and ability to work a standard schedule aligned with 8:00 AM–5:00 PM U.S. Eastern Time.
• Ability to travel locally on occasion for onsite meetings, team gatherings, or business activities when required.
• Willingness to participate in live video interviews with camera enabled and complete applicable identity verification and background screening requirements.

Benefits:

• Competitive base salary with regular performance reviews and merit-based appraisal opportunities.
• Bonus opportunities linked to performance and role outcomes.
• Remote-first flexibility with the ability to work from home while collaborating with a global team.
• Clear career development opportunities supported by mentorship and training.
• Reimbursement for approved role-related training and professional certification courses.
• Exposure to multiple cybersecurity and compliance frameworks, industries, and client environments.
• Opportunity to develop hands-on expertise across GRC, cybersecurity risk, compliance automation, and client delivery.
• Early-stage environment offering opportunities for increased responsibility and career progression.
• Direct interaction with international clients and senior technical and business stakeholders.
• Opportunity to contribute to the development of scalable GRC delivery processes, playbooks, and operational standards.