# Senior GRC Engineer

**Company**: Brex
**Location**: Seattle, Washington
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $153,600 - $192,000
**Category**: Engineering
**Industry**: Finance

**Apply**: https://job-boards.greenhouse.io/brex/jobs/8943780002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/senior-grc-engineer-892eb615-99f/

## Description

## Why Join Us

Brex is the intelligent finance platform that enables companies to spend smarter and move faster in more than 200 markets. By combining global corporate cards and banking with intuitive spend management, bill pay, and travel software, Brex enables founders and finance teams to accelerate operations, gain real-time visibility, and control spend effortlessly.

## What You'll Do

As a Senior GRC Engineer at Brex, you'll lead the IT security compliance workstreams that connect our technical control owners to the people who examine our controls: external auditors, Internal Audit, state regulators, and Finance. You'll coordinate and test the technical controls behind our financial reporting (SOX/ITGC), our annual SOC 1 Type 2 report, our state money transmitter examinations, and our FINRA IT requirements.

### Responsibilities

- Lead IT SOX/ITGC test procedures, walkthroughs, evidence, workpapers, and remediation across logical access, change management, computer operations, and IT governance.

- Manage our annual SOC 1 Type 2 engagement, including external auditor coordination, control descriptions, evidence, deficiency tracking, and review of draft report sections.

- Support state money transmitter (MTL) examinations by working with Legal, Compliance, and Finance on IT documentation, examiner requests, and tracking of IT findings.

- Test quarterly user access reviews, privileged-access evidence, and segregation-of-duties remediation, and verify that in-scope changes are complete and properly authorized.

- Run the annual BC/DR testing calendar, including tabletop and failover exercises, and document results, evidence, and remediation.

- Prepare FINRA-related IT control documentation, including business continuity, books-and-records, systems access reviews, and readiness testing.

- Track findings through to closure with clear control owners, deadlines, and evidence, and keep audit coordination separate from control operation.

- Support broader GRC team operational tasks related to evidence collection, access requests, and risk management.

### Requirements

- 5+ years of experience in IT audit, SOX/ITGC testing, GRC, or technology compliance, in fintech, financial services, or public accounting.

- Hands-on experience with ITGC testing across logical access, change management, and computer operations, and with documenting results in audit workpapers.

- Working knowledge of SOC 1 / SSAE 18, including Type 2 reports, control descriptions, and deficiency management.

- Familiarity with PCAOB standards.

- Experience working with external auditors, regulators, or examiners and responding to their requests on deadline.

- Strong organization and project management skills, with the ability to run several audit workstreams on different calendars at once.

- Clear communication, and comfort holding technical control owners accountable for evidence and remediation.

### Bonus Points

- CISA, CIA, CPA, or CISSP certification.

- Experience with state money transmitter examinations or FINRA IT and books-and-records requirements.

- Experience coordinating BC/DR testing, including tabletop and failover exercises.

- Experience supporting audit readiness during an acquisition or integration.

- Familiarity with COSO 2013 and COBIT.

- Experience with GRC or audit workflow tools, or with SQL or scripting for control testing.

## Compensation

The expected salary range for this role is $153,600 - $192,000.

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- IT audit
- SOX/ITGC testing
- GRC
- technology compliance
- fintech
- financial services
- public accounting
- ITGC testing
- SOC 1 / SSAE 18
- PCAOB standards
- external auditors
- regulators
- examiners

### Nice to have
- CISA
- CIA
- CPA
- CISSP certification
- state money transmitter examinations
- FINRA IT and books-and-records requirements
- BC/DR testing
- audit readiness
- COSO 2013
- COBIT
- GRC or audit workflow tools
- SQL or scripting for control testing

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/brex/jobs/8943780002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)