Senior GRC Engineer to automate governance, risk, and compliance for cloud, identity, endpoint, and SaaS environments in the United States. This role focuses on SOC 2, ISO 27001/27017/27701, HIPAA, and related commercial frameworks, designing automated evidence collection and continuous control monitoring that engineers can consume. You will translate compliance requirements into technical control logic, workflows, and integrations, partnering with engineering, IT, and security teams to embed controls into existing systems and pipelines and shift compliance left. You will build engineer‑facing compliance experiences, including self‑service control status, guardrails, paved‑road patterns, and feedback delivered through CI/CD, Jira, and Slack. You will support audit cycles end‑to‑end by coordinating evidence requests, maintaining evidence libraries, and tracking remediation items to closure. You will create dashboards and reporting to show control health and audit readiness across multiple frameworks, and identify opportunities to reuse evidence across SOC 2, ISO, and HIPAA. Requirements: 4+ years in GRC engineering, security engineering, or related fields with hands‑on ownership of at least one certification cycle (SOC 2 or ISO 27001). Experience with GRC platforms such as Vanta, Drata, Secureframe or similar, including configuring integrations and building evidence pipelines. Strong cloud security fundamentals (AWS, GCP, Azure IAM, logging, encryption) and ability to map controls across frameworks. Proficiency with scripting (Python, JavaScript) to build integrations and au

Senior GRC Engineer to automate governance, risk, and compliance for cloud, identity, endpoint, and SaaS environments in the United States. This role focuses on SOC 2, ISO 27001/27017/27701, HIPAA, and related commercial frameworks, designing automated evidence collection and continuous control monitoring that engineers can consume. You will translate compliance requirements into technical control logic, workflows, and integrations, partnering with engineering, IT, and security teams to embed controls into existing systems and pipelines and shift compliance left. You will build engineer‑facing compliance experiences, including self‑service control status, guardrails, paved‑road patterns, and feedback delivered through CI/CD, Jira, and Slack. You will support audit cycles end‑to‑end by coordinating evidence requests, maintaining evidence libraries, and tracking remediation items to closure. You will create dashboards and reporting to show control health and audit readiness across multiple frameworks, and identify opportunities to reuse evidence across SOC 2, ISO, and HIPAA. Requirements: 4+ years in GRC engineering, security engineering, or related fields with hands‑on ownership of at least one certification cycle (SOC 2 or ISO 27001). Experience with GRC platforms such as Vanta, Drata, Secureframe or similar, including configuring integrations and building evidence pipelines. Strong cloud security fundamentals (AWS, GCP, Azure IAM, logging, encryption) and ability to map controls across frameworks. Proficiency with scripting (Python, JavaScript) to build integrations and au