GRC Engineer I – Special Programs

• Execute end-to-end client compliance initiatives aligned with SOC 2, ISO 27001, and regulatory standards
• Author and update corporate security policies, standard operating procedures, and control evidence for audits and assessments
• Partner with technical teams to track, evaluate, and remediate cybersecurity risks and control gaps
• Track compliance milestones, evidence gathering, and task execution across concurrent client engagements
• Communicate directly with client stakeholders via email, chat, and video calls
• Gather evidence, clarify control requirements, and share engagement updates
• Perform structured control testing and readiness reviews
• Collaborate with IT, security, and operations teams on corrective action plans
• Update delivery templates, playbooks, and standard operating procedures
• Serve as the primary point of contact for a portfolio of accounts
• Guide client engagements end-to-end and resolve escalations
• Manage accounts and oversee a pod of analysts across SOC 2, ISO 27001, and NIST CSF
• Integrate into the organization and manage active client accounts within the first 15 days

• Proven ability to communicate directly with U.S. clients
• Strong organizational discipline to manage multiple cybersecurity compliance engagements simultaneously
• Hands-on execution experience across SOC 2, ISO 27001, or NIST CSF frameworks within tech-focused cybersecurity environments
• Practical familiarity authoring, rolling out, and enforcing enterprise cybersecurity policies and control benchmarks
• Ability to thrive in fast-paced startup settings and adapt to shifting priorities
• Outstanding written and verbal English communication skills
• Practical exposure to automated compliance solutions such as Vanta or similar GRC platforms
• Practical familiarity with GDPR, HIPAA, or PCI DSS
• Recognized certification such as ISO 27001 Lead Implementer, CISA, or Security+
• Reliable, high-speed internet connection
• Professional home office environment supporting confidential conversations and uninterrupted collaboration
• Commitment to work 8:00 AM–5:00 PM U.S. Eastern Time
• Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities
• Participation in live video interviews with camera on
• Identity verification and background screening, where permitted by law
• Fluency in written and verbal English communication

• Career development with mentorship and training opportunities
• Reimbursement for approved training and certification courses relevant to the current role
• Competitive base salary with regular performance reviews linked to merit-based appraisals
• Bonus opportunities
• Significant room for career advancement
• Remote-first flexibility to work from anywhere while collaborating with a global team