GRC Engineer (Cybersecurity)

Location: Hybrid in Washington, DC or Arlington, VA; salary range also specified for New York, NY

Salary: $155,000–$185,000 annually, adjusted based on location, experience, and interview performance

Company

hirify.global is a privacy-first mobile carrier building a secure wireless network and privacy-focused telecommunications services for consumers, businesses, and government agencies.

What you will do

• Design, build, and maintain automated continuous-controls monitoring across AWS, GCP, Azure, CI/CD, and SaaS environments.
• Own SOC 2 Type II, CMMC, and future compliance programs, including audit preparation, evidence collection, and remediation tracking.
• Develop risk registers, access reviews, vendor risk assessments, security policies, controls, and audit management processes.
• Assess technical and organizational risks, provide data-driven recommendations, and implement scalable engineering solutions.
• Collaborate with Security and Engineering leaders to implement GRC programs and drive risk decisions to resolution.
• Support customer security questionnaires and due diligence requests while building tooling to accelerate the process.

Requirements

• 3+ years of experience in GRC engineering, security engineering, or compliance with hands-on technical work.
• Expertise with SOC 2, CMMC, FedRAMP, NIST CSF, GDPR, and translating requirements into technical controls.
• Experience designing and implementing auditable risk or compliance programs and managing audits against deadlines.
• Strong collaboration, prioritization, project management, communication, and technical risk assessment skills.
• Bachelor’s degree in a related field or equivalent practical experience.
• Ability to work in a hybrid arrangement in Washington, DC or Arlington, VA.

Nice to have

• Startup experience.
• Security or audit certifications such as CISSP, CISA, or CRISC.
• Programming or scripting experience with Python, Go, or TypeScript.
• Experience with Vanta, Drata, Secureframe, OneTrust, and cloud-native security and logging tools.
• Experience building GRC programs or compliance automation tooling from scratch.

Culture & Benefits

• High-trust, high-expectations environment with a flat structure and cross-functional collaboration.
• 401(k) matching.
• Medical, dental, and vision premiums fully covered for employees and dependents.
• 12 weeks of paid parental leave for all parents, with no waiting period.
• Unlimited PTO, family-forming and gender-affirming care stipends, and meaningful equity.