Senior Cyber Security & GRC Engineer
$150,000–$170,000 year
HybridHouston, Texas, United States or Hartford, Connecticut, United States
Job Summary
Lead and mature the enterprise cybersecurity and risk management program across a multi-entity organization by designing a harmonized control framework supporting NIST CSF 2.0, GDPR, and SOX ITGC requirements. Own the enterprise GRC platform, Vanta, ensuring continuous monitoring, audit readiness, and program maturity while configuring controls, integrations, and audit workflows. Serve as the primary liaison for auditors and stakeholders, overseeing vulnerability management, incident response, and security architecture guidance for new systems. Develop and maintain security policies, manage risk registers, and lead compliance efforts including SOX ITGC readiness and GDPR operationalization. Conduct maturity reviews and gap analyses to drive remediation initiatives. This senior role requires 7+ years of experience and is located in the Hartford, Connecticut metro area with occasional travel.
Required Qualifications
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or equivalent experience
- 7+ years of information security, cybersecurity, or risk management experience with progression into senior program ownership responsibilities
- Hands-on experience administering a GRC platform, preferably Vanta
- Experience implementing, operating, or auditing against NIST CSF, SOX ITGC, and GDPR requirements
- Demonstrated success developing and implementing security policies, controls, and governance programs
- One or more of the following certifications: CISSP, CISM, CRISC, or CISA
- Strong technical knowledge of cloud security, identity and access management, endpoint security, vulnerability management, logging, and security operations
- Excellent communication skills with the ability to engage technical teams, business leaders, auditors, and executives
- Proven ability to work independently, manage multiple priorities, and drive accountability across stakeholders
- Eligible candidates must currently reside in the US and authorized to work in the US without visa sponsorship
- Our ideal candidates live in the Hartford, Connecticut metro area
- East coast & TX candidates will be considered with expectations of occasional travel to Connecticut
Desired Qualifications
- Direct Vanta administration experience
- Experience supporting a publicly traded company and SOX Section 404 compliance requirements
- Experience leading security programs across multiple organizations or business entities
- ISO 27001 Lead Implementer or Lead Auditor certification
- SANS/GIAC certifications
- Construction, engineering, energy, power generation, or EPC industry experience
- Familiarity with AI/ML governance, data security, and secure AI deployment practices
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.