GRC Engineer
RemoteUnited States
Job Summary
Own and mature the company risk register by designing AI-assisted workflows to surface, score, and route emerging risks in real time. Lead external audit management for SOC 2 Type II and ISO 42001 readiness, automating evidence collection pipelines in Vanta to drive continuous monitoring. Engineer the Trust and Assurance program by building automated intake and triage workflows for security questionnaires and deploying AI-assisted response generation. Build a vendor and supply chain risk program featuring automated intake, tiered risk scoring, and continuous monitoring triggers for news alerts and release notes. Redesign security and privacy policies using AI for drafting and versioning, while maintaining an integrated compliance calendar with automated reminders for SOC 2, licensing, and regulatory frameworks. Support operational privacy practices by administering cookie consent tooling and routing data subject requests through auditable workflows.
Required Qualifications
- 3+ years of experience in GRC, information security compliance, or risk management
- Working knowledge of SOC 2 (Trust Services Criteria), with hands-on experience supporting or leading audits
- Experience conducting rapid third-party/vendor risk assessments and managing a supply chain risk program
- Strong organizational skills with the ability to manage multiple concurrent workstreams and deadlines
- Excellent written communication, capable of drafting clear, audience-appropriate policy documents and executive risk summaries
- Experience with Vanta platform (or equivalent)
- You must have the authorization to work in the US to become an employee
Desired Qualifications
- Familiarity with additional frameworks is a strong plus: CIS Controls v8, NIST CSF, NIST AI RMF, NIST Privacy Framework, NIST SP 1800 series, NIST 800-53 r5, ISO 42001, ISO 27701, ISO 27001, OWASP Top 10 for Agentic Applications, MITRE D3FEND, MITRE SoT, MITRE ALTAS
- Relevant certifications a plus: CISA, CRISC, CISSP, CIPP, or equivalent
- Proven experience with leveraging AI tools in both professional and personal settings
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.