Security Officer / GRC Engineer

We are looking for an expert Security Officer / GRC (Governance, Risk, and Compliance) Engineer to provide senior security guidance and hands-on engineering contributions within the Hypershield solution.

In this role, you will be a senior security partner for Hypershield. You will assess security impact, clarify requirements, prioritize risk, guide remediation, and contribute to security automation, hardening, and remediation work.

Typical responsibilities include:

• Assess and guide improvements to the security posture of Hypershield components and delivery workflows
• Interpret Cisco-level security mandates, policies, audit requirements, release gates, and security best practices into clear guidance, control expectations, acceptance criteria, and remediation priorities
• Partner with development teams, architects, product management, SRE, compliance, and central security and data privacy teams to review new features, architecture changes and security-sensitive designs, identifying gaps, recommending mitigations, and helping teams balance security, usability, and delivery needs
• Support compliance with Cisco security mandates and Build Environment Security requirements by clarifying requirements, identifying evidence needs, reviewing audit findings, and guiding remediation priorities
• Define and contribute to implementation of security and compliance automation, reporting, and tooling that improve visibility, reduce manual work, and help teams follow security requirements consistently

Minimum Qualifications:

• Bachelor’s degree and 5+ years of hands-on experience implementing security and compliance automation, hardening, vulnerability remediation, secure delivery improvements, or related DevSecOps capabilities
• 3+ years’ experience conducting security reviews, architecture reviews, threat or risk assessments, and translating findings into practical guidance and remediation plans (e.g. to comply with SOC2, ISO or other certification frameworks)
• Experience working with corporate security mandates, secure development lifecycle requirements, product security standards, compliance requirements, or security audit processes
• Experience with security frameworks and compliance audits such as SOC 2, ISO 27001, or similar frameworks, privacy regulations and data protection requirements such as GDPR or similar standards

Preferred Qualifications:

• Build and maintain Compliance-as-Code capabilities , policy-as-code, automated control validation, continuous evidence collection, and monitoring integrated into CI/CD , so audit and supervisory readiness scales with the business rather than depending on manual, point-in-time checks.
• Relevant security certifications such as CISSP, CISM, CCSP, or similar
• Experience with different certification frameworks (e.g. FedRAMP; CRA is a bonus).
• Experience with Cisco security mandates, policies, tooling, or product security processes
• Strong written and verbal communication skills to facilitate the explanation of security risk, requirements, priorities, and tradeoffs to both technical and non-technical team members