Senior Cybersecurity Engineer - GRC Engineering & Technical Controls

What you'll do

• Build integrations, data pipelines, and automated workflows for evidence collection, control testing, and continuous control monitoring.
• Develop AI-enabled GRC workflows, Policy-as-Code guardrails, and automated compliance decision support.
• Translate regulations into technical controls, maintain framework mappings, validate controls, and administer GRC platform workflows and dashboards.

What they ask for

• Bachelor’s degree in a related technical discipline or equivalent practical experience.
• At least 7 years of progressive experience in a technical security environment, focused on GRC engineering, security engineering, IT compliance, or DevSecOps.
• Hands-on programming experience with Python, Go, PowerShell, or Bash; knowledge of Git workflows, CI/CD, and cloud infrastructure (AWS, Azure, or GCP).
• Practical security-framework knowledge and experience translating requirements into technical controls; at least one active recognized risk, audit, or security engineering certification (e.g., CISSP, CRISC, CISA, or CGRC).

Nice to have

• Experience building machine-readable compliance, automated control testing, policy-engine integrations, or continuous assurance programs.
• Experience with automated guardrails, evidence collection, configuration-drift detection, specialized automotive or privacy frameworks, or advanced GRC platform customization.

Tools

Python, Go, PowerShell, Bash, Git, CI/CD, AWS, Azure

AI focus

Develop AI-driven GRC workflows and agentic capabilities, integrating AI agents and LLM-powered pipelines to automate risk assessments, control validation, evidence classification, policy parsing, compliance scorecards, and remediation recommendations.