# Security Officer / GRC Engineer

**Company**: Cisco Isovalent
**Location**: Zurich
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://cisco.wd5.myworkdayjobs.com/en-US/Cisco_Careers/job/Zurich-Switzerland/Senior-GRC-Engineer---EMEA_2028585?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/security-officer-grc-engineer-39e86794-5d0/

## Description

We are looking for an expert Security Officer / GRC (Governance, Risk, and Compliance) Engineer to provide senior security guidance and hands-on engineering contributions within the Hypershield solution.

In this role, you will be a senior security partner for Hypershield. You will assess security impact, clarify requirements, prioritize risk, guide remediation, and contribute to security automation, hardening, and remediation work.

Typical responsibilities include:

- Assess and guide improvements to the security posture of Hypershield components and delivery workflows

- Interpret Cisco-level security mandates, policies, audit requirements, release gates, and security best practices into clear guidance, control expectations, acceptance criteria, and remediation priorities

- Partner with development teams, architects, product management, SRE, compliance, and central security and data privacy teams to review new features, architecture changes and security-sensitive designs, identifying gaps, recommending mitigations, and helping teams balance security, usability, and delivery needs

- Support compliance with Cisco security mandates and Build Environment Security requirements by clarifying requirements, identifying evidence needs, reviewing audit findings, and guiding remediation priorities

- Define and contribute to implementation of security and compliance automation, reporting, and tooling that improve visibility, reduce manual work, and help teams follow security requirements consistently

**Minimum Qualifications:**

- Bachelor’s degree and 5+ years of hands-on experience implementing security and compliance automation, hardening, vulnerability remediation, secure delivery improvements, or related DevSecOps capabilities

- 3+ years’ experience conducting security reviews, architecture reviews, threat or risk assessments, and translating findings into practical guidance and remediation plans (e.g. to comply with SOC2, ISO or other certification frameworks)

- Experience working with corporate security mandates, secure development lifecycle requirements, product security standards, compliance requirements, or security audit processes

- Experience with security frameworks and compliance audits such as SOC 2, ISO 27001, or similar frameworks, privacy regulations and data protection requirements such as GDPR or similar standards

**Preferred Qualifications:**

- Build and maintain Compliance-as-Code capabilities , policy-as-code, automated control validation, continuous evidence collection, and monitoring integrated into CI/CD , so audit and supervisory readiness scales with the business rather than depending on manual, point-in-time checks.

- Relevant security certifications such as CISSP, CISM, CCSP, or similar

- Experience with different certification frameworks (e.g. FedRAMP; CRA is a bonus).

- Experience with Cisco security mandates, policies, tooling, or product security processes

- Strong written and verbal communication skills to facilitate the explanation of security risk, requirements, priorities, and tradeoffs to both technical and non-technical team members

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- security and compliance automation
- hardening
- vulnerability remediation
- DevSecOps
- security reviews
- architecture reviews
- threat or risk assessments
- SOC2
- ISO 27001
- GDPR

### Nice to have
- Compliance-as-Code
- policy-as-code
- automated control validation
- continuous evidence collection
- monitoring integrated into CI/CD
- CISSP
- CISM
- CCSP
- FedRAMP
- CRA
- Cisco security mandates

---

Source: [Apply at cisco.wd5.myworkdayjobs.com](https://cisco.wd5.myworkdayjobs.com/en-US/Cisco_Careers/job/Zurich-Switzerland/Senior-GRC-Engineer---EMEA_2028585?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)