Назад
Company hidden
4 часа назад

Senior GRC Engineer (Cybersecurity)

140 000 - 165 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US/Canada
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior GRC Engineer (Cybersecurity): Leading SOC 2, TISAX, and DORA audit remediation and enterprise risk governance with an accent on control frameworks, audit evidence, and executive-level risk reporting. Focus on reducing remediation backlogs, managing parallel audit requirements, building trusted governance metrics, and coordinating complex compliance obligations with business units, executives, and auditors.

Location: Remote USA or Canada

Salary: $140,000–$165,000 USD per year or $120,000–$145,000 CAD per year.

Company

hirify.global powers auto-related decisions through proprietary data, advanced analytics, industry expertise, and workflows that connect insight to action across North America, Europe, and Australia.

What you will do

  • Lead SOC 2, TISAX, and DORA audit remediation with fixed deadlines and stakeholder visibility.
  • Manage enterprise risk assessments, risk treatment, risk register maintenance, and acceptance reviews.
  • Coordinate audit evidence collection, control documentation, finding resolution, and audit activities across frameworks.
  • Develop governance metrics, KRIs, and reporting dashboards for customers, the board, and executive leadership.
  • Build and maintain control frameworks aligned with customer and regulatory requirements.
  • Manage POAM tracking, vulnerability remediation governance, and compliance coordination with business units, executives, and audit partners.

Requirements

  • 7+ years of experience in GRC, audit, or compliance engineering, with demonstrated success managing parallel engagements.
  • Deep hands-on experience with SOC 2, ISO 27001, and enterprise audit processes.
  • Proficiency with GRC platforms such as ServiceNow, Archer, AuditBoard, or an equivalent platform.
  • Strong technical understanding of IT controls, security frameworks, and risk methodologies.
  • Excellent communication skills for audit coordination, exception tracking, and board-level reporting.
  • Experience developing metrics and dashboards that communicate risk posture to executive leadership.
  • Must be legally authorized to work in the country where employment is offered.
  • Employment sponsorship is not provided.

Nice to have

  • CISSP, CISM, or CRISC certification.
  • Experience with DORA, PCI DSS 4.0, or EU regulatory frameworks.
  • Background in B2B SaaS compliance and customer audit programs.
  • Experience managing multiple concurrent audit frameworks and regulatory examinations.

Culture & Benefits

  • Virtual-first work environment with flexible work arrangements.
  • Medical, dental, vision, disability, life insurance, retirement savings programs, paid time off, and wellness programs for eligible employees; benefits vary by country and employment status.
  • Learning and development opportunities.
  • Culture focused on customer success, innovation, collaboration, data-driven decisions, execution, accountability, independence, and integrity.

Hiring process

  • Applications are accepted through the hirify.global careers site and select trusted job boards such as LinkedIn or Indeed.
  • Official communication comes from email addresses ending in @jdpower.com or @jdpa.com.
  • Reasonable accommodations are available during recruitment; accommodation requests can be sent to careers@jdpower.com.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →