GRC Engineer I

About the role

Built around client relationship excellence, this role focuses on delivering exceptional client experiences, cultivating trust, and driving program outcomes while managing accounts and overseeing a pod of analysts across frameworks such as SOC 2, ISO 27001, and NIST CSF. The successful candidate will integrate quickly into the organization and manage active client accounts within their first 15 days.

What you'll do

• Execute end-to-end client compliance initiatives - assist in implementing and maintaining client security compliance programs aligned with SOC 2, ISO 27001
• Maintain policy and evidence repositories - author and update corporate security policies, standard operating procedures
• Identify and mitigate technical risks - partner with cross-functional technical teams to track, evaluate, and remediate cybersecurity risks and control gaps
• Manage project deliverables and timelines - track compliance milestones, evidence gathering, and task execution across concurrent client engagements under senior guidance
• Drive direct client communications - engage directly with client stakeholders via email, chat, and video calls to gather evidence, clarify control requirements

What you need

• ISO 27001
• CISA
• Compliance
• Data privacy
• SOP writing
• Client relationship
• Any graduate