Senior Security GRC Engineer Jobs

Senior Security Engineer

We’re looking for an experienced security engineer to join our highly collaborat...

Location

Canada; United States

Salary:

143000.00 - 210000.00 USD; CAD / Year

1Password

Expiration Date

Until further notice

Requirements

Minimum of 5+ years of combined experience in security, GRC, risk, or a related space with hands-on technical work building automation solutions as they relate to compliance controls, evidence, GRC platforms, etc.
experience in effectively analyzing data and programs for security risk, compliance, and maturity
willingness to wear different hats and work on areas where needed
must excel in communication, and demonstrate the ability to explain technical security concepts to a non-technical audience
must have a highly collaborative and teamwork-focused approach, as well as a heart for mentoring and leveling up your teammates
must be able to assess and mitigate corporate risk within the organization
sophisticated program/project management abilities

Job Responsibility

Own, design and manage the continued enhancement of various GRC programs including but not limited to strategy, roadmap, and controls to address regulatory requirements across multiple jurisdictions
communicate our compliance framework and various program requirements to all relevant stakeholders (internal and external)
engage cross-functionally with groups such as Engineering, Finance, Legal, Product, and Sales to establish a thoughtful, strategic and tactical approach to multiple GRC programs and related processes
assist with analysis and preparation for internal and external audits
accurately and effectively communicate our compliance position and programs to auditors and customers
partner with other members of the security team to establish security guidelines that enable the organization to move fast in a safe and secure manner
operate as a technical leader by helping define the GRC roadmap and by leveling up junior employees
build strong relationships with partner and stakeholder teams in order to build a scalable GRC program

What we offer

Maternity and parental leave top-up programs
wellness spending allowance
generous PTO policy
company-wide wellness days off scheduled throughout the year
wellness coach membership
comprehensive health coverage
company equity for all full-time employees
retirement matching program
training budget, 1Password University access, and learning sessions
free 1Password account (and friends and family discount!)

Fulltime

Senior Information Security Engineer

Serve as a technical leader in our Security team reporting to our Information Se...

Location

United States , Boston

Salary:

150000.00 - 190000.00 USD / Year

Whoop

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Computer Science, Information Security, or a related technical field and/or advanced certifications (CISSP, CISM, AWS Security Specialty, SANS, etc.)
8+ years of hands-on experience in Information Security, IT Security, or a related role, including at least 2 years in a senior or lead capacity
Proven track record implementing and managing advanced security technologies (e.g., CASB, CNAPP, CSPM, SIEM, SOAR, DLP, SWG)
Experience securing AI/ML systems or APIs, including governance of third-party AI integrations and organizational use of AI tools
Strong understanding of modern cloud security architecture (AWS, Azure, GCP) and experience performing threat modeling and risk assessments on cloud-based systems
Hands-on experience with application security tooling (SAST, SCA, DAST) and embedding secure development practices
Demonstrated leadership in security incident response, investigations, and root cause analysis
Effective communicator with the ability to influence stakeholders and explain security concepts to technical and non-technical audiences
Strong project management skills and the ability to drive initiatives to completion in a fast-paced environment
Experience mentoring engineers and setting operational standards

Job Responsibility

Implement and enhance security controls by leading the deployment, integration, and tuning of solutions such as CNAPP, SIEM, CASB, EDR, DLP, and MDM to maximize effectiveness
Support security design decisions by providing subject matter expertise on cloud and SaaS security best practices while influencing architecture led by the Security Architect role
Lead incident response and investigations by guiding containment, remediation, root cause analysis, and post-incident improvements
Strengthen application security by overseeing secure development practices and managing SAST, SCA, and DAST tooling
Advance identity and access management by supporting IAM policy enforcement, SSO, MFA, SCIM, RBAC, and user lifecycle governance
Secure AI systems and integrations by assessing and protecting embedded APIs and organizational AI tool usage to ensure resilience, privacy, and compliance
Collaborate cross-functionally by working with Engineering, IT, and GRC teams to embed security into systems and workflows
Mentor and influence by providing technical guidance, reviewing work, and promoting security-first thinking across the organization
Stay ahead of threats and regulations by tracking emerging risks, technologies, and compliance requirements to inform forward-looking strategies
Participate in and help improve the on-call rotation by providing guidance, escalation support, and driving improvements in response processes

What we offer

competitive base salaries
meaningful equity
generous equity package

Fulltime

Senior Systems Security Engineer

AnaVation is looking for a Sr. Systems Security Engineer to assist the customer ...

Location

United States , Washington

Salary:

Not provided

AnaVation

Expiration Date

Until further notice

Requirements

5-10 years of experience in information system engineering and configuration management
5 years of experience in control implementation and secure system engineering or design
Excellent communication skills
Hands on experience with: Security monitoring and evaluation, including audits, assessments, and risk management
SIEM tools (e.g., Splunk)
Vulnerability Scanning tools (e.g., Tenable, Nessus)
EDR tools (e.g., Crowdstrike)
Web App Scanning tools (e.g., Burpsuite, Acunetix)
Active Directory
SANs

Job Responsibility

Performing hands-on engineering, administration, and securing of multiple operating systems (e.g., Windows, RHEL, Unix variants), and applying DISA STIGs across diverse vendor technologies, including virtualization platforms (VMWare, Hyper-V), cloud environments (AWS, Azure, Google Cloud), and enterprise applications
Perform system administration tasks to include audit and log management, availability monitoring and remediation, account management and access reviews, and configuration update scheduling and performance
Contribute to the design and development of secure system architectures, ensuring security is integrated through system and network lifecycles
Evaluate, implement, and document security architecture solutions, aligning with compliance requirements and organizational mission needs
Ensure technical compliance with applicable security frameworks, standards, and regulations (e.g., DISA SITGs, NIST 800-53, RMF)
Conducting, configuring, and managing vulnerability scans
Conducting vulnerability remediations, patching, and system hardening
Collaborate with ISSOs, Assessors, System Owners, and other stakeholders to implement security controls
Support security assessments, audits, and accreditation/authorization (ATO) activities
Document security configurations, engineering solutions, and compliance evidence

What we offer

Generous cost sharing for medical insurance for the employee and dependents
100% company paid dental insurance for employees and dependents
100% company paid long-term and short term disability insurance
100% company paid vision insurance for employees and dependents
401k plan with generous match and 100% immediate vesting
Competitive Pay
Generous paid leave and holiday package
Tuition and training reimbursement
Life and AD&D Insurance

Fulltime

Info Security Full Stack Engineer

The Info Security Tech Sr Analyst is an intermediate level position responsible ...

Location

India , Pune; Mumbai

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Knowledge of 3rd party supplier controls and risk assessment for applications is preferred
At least 3+ years’ demonstrated performance as a technical SME in a highly regulated environment with 8+ years of experience as a developer
Experience with technical documentation, API specifications, architectural diagrams etc.
Experience in the design and implementation of compliance programs and projects
Strong written and oral communication skills, attention to detail and ability to deliver high quality materials, results oriented
Role model for and driver of a culture of ethics, learning and accountability
Positive, can-do attitude, action and results-oriented, decisive, and willing to take control of a situation when required
trusted advisor with sound judgment even when operating under pressure or significant stress
Exceptional candidates who do not meet all criteria may be considered for the role based on skills, ability to learn and positive, do what it takes attitude to drive success
Technical skills: HTML, CSS, JSAngular v13 (preferred),SharePoint development, SharePoint Workflow development

Job Responsibility

Developing and configuring solutions based on business needs and inputs
Develop tools and solutions to integrate risk management applications with other Citi systems
Test planning, coordination, and tracking including unit testing, integration testing, and User Acceptance
Ensuring that appropriate governance and oversight rules are implemented and adhered to
Drive quality in work, documentation and reporting
Provide feedback to improve efficiency, to simplify existing solutions as part of continuous improvement
Be a partner for Internal Teams looking to introduce new capabilities within their business
Assist with regulatory requests
Collaborate with senior Citi management across business and functional lines in case of need as each introduce new capabilities, to keep SaaS activity within our risk tolerance
Drive continuous improvement efforts for quality and efficiency

Fulltime

Senior Governance, Risk and Compliance Analyst - Governance

Come join the company that is reinventing cloud security and empowering business...

Location

Netherlands

Salary:

Not provided

Wiz

Expiration Date

Until further notice

Requirements

5+ years of experience in one or more of the Governance, Risk, and Compliance domains
Passion for security and keeping Wiz safe
Ability to collaborate with technical and non-technical teams alike to further oversight responsibilities of Security
Deep knowledge of one or more industry frameworks such as ISO 27001, ISO 27017, SOC 2, PCI DSS, NIST CSF, etc. and baseline knowledge of others
Ability to assist with security compliance assessments to ensure compliance with internal and external requirements (ISO, NIST, CIS, etc.)
Experience working in a fast-paced tech environment both independently, and collaboratively within a team environment
Ability to build strong relationships across teams and functions in a global workplace
Applicants must have the legal right to work in the country where the position is based, without the need for visa sponsorship

Job Responsibility

Design and update policies, procedures, and controls to drive confidentiality, integrity, and availability across the Wiz environment
Continuously improve processes, tools, and procedures for audit and compliance management
Collaborate and work cross-functionally across the company to address governance and compliance needs and to support the Wiz Control Framework, partnering with Engineering, Product, Sales, Legal, HR, and other teams
Proactively improvement control design and performance to address a changing risk landscape
Deliver timely audits through working with internal and external auditors
Help customer-facing teams respond to information security requirements and questionnaires
Assist with third party risk management reviews, assessing vendor’s security, compliance, and privacy posture
Participate in team project management, including documentation, project planning, task management, and prioritization
Participate in recurring annual core audits (e.g., SOC 2, ISO, PCI)
Maintain awareness of security and regulatory trends, perform research and analysis on new certifications, and help Wiz pursue new international compliance initiatives

Digital Resilience and IT Risk Manager

Our COO Functional Risk Management team embedded in the Digital Resilience Area ...

Location

Spain , Barcelona

Salary:

Not provided

Allianz

Expiration Date

Until further notice

Requirements

Experience in using GRC tools and reporting tools (e.g., PowerBI)
A solid track record of achievement and continues development (can be any academic, professional, and/or sport)
Strong understanding of risk management frameworks and methodologies
Data-driven mindset with experience in data analysis and interpretation
excellent analytical and problem-solving skills
An organized and methodological approach with strong interpersonal skills
Possess a strong sense of curiosity and the ability to think creatively and innovatively
4+ years of experience in Operational, IT, or Information Security (IS) Risk Management, Management Consulting, IT Governance, or a related field
Bachelor’s degree or higher in Information Technology, Engineering, Economics, Risk Management, Business Administration, or any related field

Job Responsibility

Support, coordinate and oversee information Risk Management Lifecycle activities performed by the 1st LoD
Actively contributes to identifying improvements and assist in adapting the Risk Management frameworks to address our rapidly evolving risk landscape
Coordinate thorough risk assessments to identify, evaluate and mitigate information risks across the organization
Ensure adherence to relevant regulatory requirements and internal policies related to information risk management as well as preparing detailed reports and presentations on risk findings, trends and recommendations for senior management and stakeholders
Utilize data analytics to support risk assessments, decision-making processes and to drive insights that enhance risk management strategies
Work closely with various business units, IT, IS, Risk and compliance teams to ensure alignment and integration of risk management practices
Utilize new technologies and feature within our organizational setup to enhance, scale, and optimize existing risk management processes
Develop and deliver training programs to enhance awareness and understanding of information risk management across the organization
Foster a risk-driven culture and advocate for the benefits of risk management whilst engaging with leadership and functional leads to ensure alignment and support

What we offer

We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad
We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location)
From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered
Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach

Fulltime

Information Systems Security Officer

The Information Systems Security Officer (ISSO) is responsible for safeguarding ...

Location

United States; Canada , Athens, Georgia; Atlanta, Georgia; Toronto, Ontario

Salary:

Not provided

Docebo

Expiration Date

Until further notice

Requirements

8+ years of experience in information systems security, with a focus on compliance with NIST and DoD guidelines
In-depth knowledge of FedRAMP, NIST SP 800-37, NIST SP 800-53, and DoD 8510.01 policies and procedures
Strong technical writing skills for developing SOPs, work instructions, and senior-level briefs
Proficient in risk and vulnerability assessment, security infrastructure design, and continuous monitoring
Prior experience on obtaining FedRamp ATO

Job Responsibility

Own the FedRAMP/DoD RMF authorization lifecycle for assigned systems (strategy → authorization → continuous monitoring → ATO maintenance)
Define and maintain the FedRAMP program governance model, roles & responsibilities (including Sponsor/Authorizing Official interactions)
Create, own, maintain, and version-control the System Security Plan (SSP), Security Assessment Report (SAR), continuous monitoring (ConMon) artifacts, POA&Ms, SSP annexes, and all ATO package deliverables
Build and run the ConMon program: define telemetry requirements, dashboards, vulnerability ingestion, thresholds, incident feed, and reporting cadence
Triage vulnerabilities, manage POA&Ms (track remediation owners, dates, residual risk), and ensure POA&M closure meets customer and FedRAMP expectations
Lead the selection, engagement, and technical coordination with 3PAOs and any external assessors. Ensure assessments, testing, and SAR content are accurate and timely
Evaluate security impact for architectural or operational changes (Security Impact Analysis), own risk acceptance processes, and coordinate Risk Acceptance with Sponsors/Authorizing Officials
Integrate change control with the ConMon program to ensure authorized/approved changes are documented and do not break control baselines
Act as the primary internal liaison across Product, Engineering, DevOps, Security, Sales, Legal, and Marketing for anything impacting the FedRAMP posture and ATO timelines. Drive working groups and weekly syncs
Support pre-sales and customer conversations on FedRAMP posture and timelines alongside Sales

What we offer

Generous Vacation Policy, plus extra floating holidays to use for religious or cultural events that matter to you
Employee Share Purchase Plan
Career progression/internal mobility opportunities
Four employee resource groups to get involved with (the Docebo Women's Alliance, PRIDE, BIDOC, and Green Ambassadors)
WeWork partnership and “Work from Anywhere” program

Fulltime

New

Quality manager

A well-established international sourcing company seeking an experienced and met...

Location

Hong Kong , Kwun Tong

Salary:

30000.00 - 35000.00 HKD / Month

Randstad

Expiration Date

December 26, 2025

Requirements

Bachelor’s or Master’s degree in Engineering or a related discipline
>7 years of experience in QA/QC, with a significant portion in a team leadership or management role
Professional certifications such as Certified Quality Manager (CQM), Lead Auditor, or a Kaizen/Lean Six Sigma Green/Black Belt are desirable
Strong working knowledge of quality management systems and standards (e.g., ISO 9000, ISO 14000)
Solid understanding of UK and EU product safety and compliance regulations
Exceptional leadership, communication, and interpersonal skills with the ability to collaborate effectively with international stakeholders
Experience working with suppliers in China is essential
occasional travel will be required

Job Responsibility

Oversee and manage daily quality inspection operations, ensuring products meet stringent quality and ethical standards
Manage relationships and performance of third-party inspection partners to ensure compliance with company objectives
Collaborate with internal technical teams (HK & UK) and suppliers to conduct root cause analysis and implement effective Corrective Action Plans (CAP) for any product failures
Develop, review, and update Standard Operating Procedures (SOPs) and inspection checklists to ensure relevance and effectiveness for a diverse product range
Utilise data analysis to prepare performance reports, identify areas for continuous improvement, and drive initiatives to enhance product quality and process efficiency
Lead, mentor, and develop the quality team, fostering a culture of excellence and continuous learning
Conduct regular audits and provide training to suppliers and third-party inspectors to ensure a clear understanding of quality requirements

What we offer

13-month pay
Bonus 20%

Fulltime

!

Senior Security GRC Engineer

Atlassian

Location:
India, Bengaluru

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
April 23, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Senior Security GRC Engineer

Senior Security Engineer

Senior Information Security Engineer

Senior Systems Security Engineer

Info Security Full Stack Engineer

Senior Governance, Risk and Compliance Analyst - Governance

Digital Resilience and IT Risk Manager

Information Systems Security Officer

Quality manager

Senior Security GRC Engineer

Atlassian

Location:India, Bengaluru

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:April 23, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Senior Security GRC Engineer

Senior Security Engineer

Senior Information Security Engineer

Senior Systems Security Engineer

Info Security Full Stack Engineer

Senior Governance, Risk and Compliance Analyst - Governance

Digital Resilience and IT Risk Manager

Information Systems Security Officer

Quality manager

Location:
India, Bengaluru

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
April 23, 2025