Senior Security Engineer GRC Engineering

About the role

One Identity holds certifications because customers require them before they buy, and the ones ahead open international regulatory markets. This role builds the centralized common controls framework, with ISO 27001 and SOC 2 as the base, that each addition maps into.

What you'll do

• Own continuous control monitoring end to end: integrations into the identity provider, cloud control planes, code repositories, endpoint management, and ticketing
• Build the centralized common controls framework and the artifact layer on it: ISO 27001 and SOC 2 as the base, each new framework mapped against it
• A control tested once answers every framework referencing it, and an audit-ready package assembles on demand
• Hold the platform to its own standard. The evidence system sits inside audit scope, logs its own activity, and operates within the controls it measures
• Write control validation as code: checks that programmatically test whether a control is implemented, with output an auditor accepts and an engineer can act on

What you need

• ISO 27001
• Python
• Compliance
• AWS
• Azure
• Risk management
• Any graduate