Senior GRC Engineer

Design Control Libraries : Build and maintain scalable, reusable security and compliance control libraries across the organization.

Framework Mapping : Translate complex regulatory and industry standards into standardized, actionable control definitions.

Risk & Policy Alignment : Map evidence requirements across overlapping compliance frameworks to eliminate redundancy and support the ISO & NIST Risk Management Frameworks.

Evidence Modeling : Define standardized evidence artifacts, validation logic, and assessment criteria for automated control evaluation.

Engineering Collaboration : Partner with engineering and security teams to build automated evidence collection pipelines and continuous compliance monitoring.

Data-Driven GRC : Build compliance content and metadata rule libraries using structured data formats (JSON/YAML) to scale platform capabilities.

NIST & ISO Implementation : Drive the practical design, implementation, and mapping of NIST (CSF / SP 800-53 / RMF / SOC 2) and ISO 27001/27002 control frameworks across technical environments.

Assessment Guidance : Define clear implementation guidance, control validation criteria, and self-assessment objectives for technical teams.

Continuous Improvement : Continuously refine GRC workflows, tooling, and framework content as standards and organizational needs evolve.