Security Engineer, GRC

We are looking for a Security Engineer to join our Governance, Risk, and Compliance (GRC) team. As a Security Engineer on the GRC team, you will help build and scale programs that support commercial audits, federal compliance, security risk management, vendor risk, policy management, and customer trust.

Responsibilities:

• Manage moderately complex, cross-functional compliance or security initiatives with a high degree of organization, ownership, and follow-through.
• Apply one or more security or compliance frameworks, such as SOC 2, ISO 27001, NIST 800-53, CMMC, FedRAMP, PCI DSS, or similar standards.
• Support FedRAMP or comparable federal compliance programs, ideally in a program management, project management, or cross-functional coordination capacity.
• Translate framework requirements into clear control activities, policies, procedures, test cases, evidence requirements, and operational workflows.
• Work with GRC platforms such as Drata, Tines, Vanta, ServiceNow, Archer, LogicGate, Secureframe, or comparable tools, and use automation techniques such as APIs, scripts, webhooks, ticketing workflows, and cloud or identity integrations.
• Actively use AI in day-to-day work and show a clear trajectory toward building with it, including experimenting with or configuring AI-assisted workflows for GRC, security, risk, or compliance tasks.

What you can expect:

• Manage GRC initiatives spanning commercial compliance, federal compliance, security risk, vendor risk, policy management, and customer trust.
• Support planning, assessment preparation, remediation, and continuous monitoring activities for FedRAMP, CMMC, NIST 800-53, and related programs.
• Partner with control owners, Security, Engineering, Legal, Privacy, auditors, assessors, and business stakeholders to gather evidence, track actions, and resolve gaps.
• Define and improve how evidence is generated, validated, mapped to requirements, stored, and traced to its source.
• Monitor control health, evidence freshness, configuration drift, exceptions, and remediation progress.
• Build or configure automated and AI-assisted workflows that reduce manual effort and improve the reliability of compliance and risk processes.

Salary:

• USA-based roles: $123,000 - $172,000 per year
• Canada-based roles: $111,000 - $155,000 per year

Benefits:

• Health and wellbeing benefits
• Maternity and parental leave top-up programs
• Competitive health benefits
• Generous PTO policy
• RSU program for most employees
• Retirement matching program
• Free 1Password account
• Paid volunteer days
• Peer-to-peer recognition through Bonusly
• Remote-first work environment