GRC Engineer
RemoteArgentina
Job Summary
Transform the information security compliance program into an automated, continuously monitored system by translating regulatory requirements into technical controls and building evidence collection pipelines. Maintain key certifications including ISO 27001, ISO 27701, and PCI DSS while collaborating with cross-functional teams to embed compliance checks and telemetry into a standardized GRC platform. Manage responses to partner security assessments and develop a knowledge base to enable stakeholder access to security capabilities. Improve risk management, third-party due diligence reviews, and security awareness initiatives through AI-assisted workflows and scripting.
Required Qualifications
- Strong programming/scripting skills (e.g., Python, Go, Bash) and experience building custom API integrations to automate evidence gathering
- Comfortable designing, operating, and integrating GRC tools with AI-assisted workflows to simplify and scale repetitive compliance tasks
- Proven experience in conducting security assessments and automating third-party vendor reviews
- Strong understanding of security frameworks and standards, such as ISO 27001, SOC 2, NIST, PCI-DSS, or similar
- Strong analytical and problem-solving skills
- Ability to work cross-functionally to drive security initiatives
- 3+ years of relevant experience in GRC Engineering, Security Engineering, or Cloud Security, managing the execution of highly technical compliance projects
- Fluent in English
- Good communication skills
Desired Qualifications
- Bachelor's or Master's Degree in Computer Science, Information Security, or another similar relevant degree (or equivalent experience in a technical security role)
- Certifications such as CISSP, ISO 27001 Lead Implementer, CRISC, CCSP, AWS/Google security or equivalent
- Familiarity with continuous compliance automation engines (e.g., Vanta, Drata, etc)
- Experience with AI risk governance frameworks (such as the NIST AI Risk Management Framework or EU AI Act) and securing LLM-enabled tooling
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.