GRC Engineer I

About the role

As a GRC Engineer I, you will support the delivery of cybersecurity governance, risk, and compliance programs for a diverse portfolio of clients. You will help organizations establish, maintain, and strengthen their security frameworks, including SOC 2, ISO 27001, and NIST CSF. Working in a fast-paced, client-focused environment, you will coordinate compliance activities, manage evidence and documentation, and support audit readiness.

What you'll do

• Support the implementation and ongoing maintenance of client security compliance programs aligned with SOC 2, ISO 27001, NIST CSF, and relevant regulatory standards
• Create, maintain, and update security policies, standard operating procedures, and control evidence to support audits and compliance assessments
• Work with technical and operational teams to identify, evaluate, track, and remediate cybersecurity risks and control gaps
• Coordinate project deliverables, compliance milestones, evidence collection, and task execution across multiple client engagements, with guidance from senior team members
• Serve as a direct point of contact for client stakeholders through email, chat, and video calls, gathering evidence, clarifying control requirements

What you need

• ISO 27001
• Compliance
• SOP writing

Good to have

• CISA
• Data privacy