225 grc engineer jobs at 152 companies in United States
GRC Engineer
New York City, New York, United States
$188k-$221k/yr OnsiteFull Time
5+ YOE5+ years across software/automation engineering and security compliance, production-grade scripting (Python), GRC domain fluency (SOC 2/ISO 27001), clear technical writing, and experience building LLM/agent workflows.
Python, OSCAL, Terraform, CI/CD, APIs, LLM
GRC Engineer
Arlington, Virginia, United States
$155k-$185k/yr HybridFull Time
3+ YOE3+ years GRC engineering, security engineering, or compliance with hands-on technical work; expertise in SOC 2, CMMC, FedRAMP, NIST CSF, GDPR; BA/BS or equivalent; CISSP, CISA, CRISC preferred; scripting (Python, Go, TypeScript) and GRC tooling (Vanta, Drata, Secureframe, OneTrust) a plus.
AWS, GCP, Azure, Python, Go, TypeScript, Vanta, Drata, Secureframe, OneTrust
GRC Engineer
Sunnyvale, California, United States
$160k-$190k/yr OnsiteFull Time
5+ YOEBachelor's or Master's in Information Security, Computer Science, Engineering or related field; 5-8 years GRC/risk/compliance experience; active security certification (CISSP, CISA, CISM, AIGP, ISO 27001 Lead Auditor); experience with GRC platforms and automation.
Vanta, Anecdotes, Drata, OneTrust
Senior GRC Engineer
New York City, New York, United States
$181k-$244k/yr HybridFull Time
6+ YOE6+ years in security engineering, GRC, or DevSecOps; scripting in Python or Bash; working knowledge of at least two compliance frameworks; GRC platform proficiency; ability to build diagrams and translate requirements.
Python, Bash, Drata, Vanta, Hyperproof, Archer, OneTrust, ServiceNow GRC
GRC Engineer
United States
RemoteFull Time
4+ YOE4+ years in GRC, security compliance or audit at a SaaS company; ran SOC 2 Type II end to end; technical with scripting (Python or similar) and APIs; working knowledge of privacy regimes; organized and self-directed.
Python, APIs
Lead GRC Engineer
San Francisco or California or United States
$220k-$280k/yr HybridFull Time
6+ YOERequires 6+ years across security, GRC, software or automation engineering; experience automating technical controls, Python scripting, APIs, integrations, SOC 2, ISO 27001, and continuous monitoring.
Python, APIs, SOC 2, ISO 27001, cloud infrastructure, IdP, HRIS, source control, CI/CD, SaaS
GRC Engineer
Boston, Massachusetts, United States
$130k-$180k/yr HybridFull Time
5+ YOE5+ years GRC, compliance, or security risk experience; hands-on SOC 2 audit support; knowledge of ISO 27001, ISO 42001, FedRAMP; third-party risk management; compliance automation platform experience; internal audit experience; customer-facing security communication; AI tool usage.
Scytale, Vanta, Drata, Python, SQL
GRC Engineer
New York City or San Francisco
OnsiteFull Time
3+ YOE3-6 years software/security/DevOps experience; hands-on support of SOC 2, ISO 27001, or NIST; production-quality code in Python or similar; API/integration experience; familiarity with cloud infrastructure and IAM; GRC tooling experience; relevant frameworks like CMMC, NIST, GDPR/CCPA.
Python, Vanta, SOC 2, ISO 27001, NIST 800-53, NIST 800-171, CMMC, GDPR, CCPA
Staff Security Engineer, GRC
New York City, New York, United States
$246k-$287k/yr HybridFull Time
7+ YOERequires 7+ years in GRC, cloud security, security engineering, audit, or regulated technology; expertise in CMS EDE, NIST SP 800-53, AWS control implementation, compliance automation, audits, and risk management.
AWS, Azure, NIST SP 800-53, infrastructure as code, policy as code, GRC platforms, SIEM
Senior GRC Engineer
United States
RemoteFull Time
3+ YOE3+ Mgmt3+ years GRC experience with SOC 2/ISO 27001/NIST CSF, 3+ years people leadership, client relationship management, project management, policy development, strong written and verbal English.
Vanta, SOC 2, ISO 27001, NIST CSF, HIPAA, PCI DSS
Archer GRC Developer
Herndon or United States
RemoteFull Time
8+ YOEBachelor's degree in Cybersecurity, Computer Science, Information Systems, Mathematics, Engineering or related field; 8+ years software development experience; strong Archer GRC development and configuration skills; U.S. citizenship required.
Archer, JavaScript, Splunk, Windows Server, SQL Server, Excel VBA, OSCAL
Security GRC Engineer
Palo Alto, California, United States
OnsiteFull Time
4+ YOE4+ years in security, GRC, security engineering, cloud security, or compliance engineering; hands-on understanding of SaaS/cloud environments; ability to reason about Terraform, Kubernetes, CI/CD, IAM; direct experience with at least two of SOC 2, ISO 27001, HIPAA, or NIST CSF/800-53; experience with APIs, scripting, SQL; clear writing.
Terraform, Kubernetes, CI/CD, IAM, APIs, SQL, Okta, Auth0, SIEM, SAST, SCA
Principal GRC Business Engineer
Santa Clara, California, United States +1 more
$168k-$271k/yr OnsiteFull Time
10+ YOE10+ years in information security or IT risk, including 6+ years in GRC; bachelor's or master's degree or equivalent; CISSP, CRISC, CISM, or CISA required; cloud and GRC platform experience.
Artificial Intelligence (AI), AWS, Azure, GCP, NIST AI RMF
Security GRC Engineer
San Francisco or Palo Alto
OnsiteFull Time
Experience with GRC frameworks (SOC 2, ISO 27001, ISO 42001, AIUC-1), strong cross-functional collaboration, ability to trace claims to configurations, and experience with security compliance reviews.
GRC Engineer
San Mateo, California, United States
$200k-$250k/yr OnsiteFull Time
7+ YOERequires 7+ years of security or IT compliance experience, cloud provider experience, software compliance and SOC 2/ISO 27001 audit experience, strong communication, and cross-functional execution skills.
AWS, GitHub, Python, JSON
SAP Security & GRC Engineer
Salisbury, North Carolina, United States
$147k-$220k/yr HybridFull Time
8+ YOE8-10+ years SAP Security/GRC experience including full-lifecycle SAP GRC 12 implementation; strong hands-on with GRC ARM, EAM, BRM, Access Control, Process Control, SoD, BRF+, MSMP workflows; SOX/ITGC knowledge; bachelor's or master's degree preferred.
SAP GRC, SAP S/4HANA, SAP Fiori, SAP CAR, SAP SLT, SAP BTP, SAP BDC, SAP Signavio, SAP BODS, SAP HANA, SAP CPI, SAP Cloud ALM, SAP Single Sign-On, SAP SAML, SAP GUI, SAP SNC, Joule
SAP Security & GRC Engineer
United States
$100k-$150k/yr RemoteFull Time
10+ YOEBachelor's degree in Computer Science or related field; 10+ years SAP Security/GRC experience; hands-on with SAP GRC Access Control, Fiori, BTP; knowledge of SOX, GxP, PCI; strong communication and documentation skills.
SAP S/4HANA, SAP ECC, SAP BW/4HANA, SAP Fiori, SAP BTP, SAP SuccessFactors, SAP GRC Access Control, SAP GRC Process Control, SAP IDM
GRC Engineer (Governance Risk and Compliance)
United States
$115k-$140k/yr RemoteFull Time
4+ YOE4+ years in IT audit, GRC, or security assurance; hands-on technical control testing for SOC 2, SOX/ITGC, ISO 27001, NYDFS, or NIST; ability to retrieve and validate technical evidence; working knowledge of SQL, KQL, PowerShell, or similar; U.S. work authorization without sponsorship.
SQL, KQL, PowerShell, Azure, Entra ID, Microsoft 365, SIEM, SOAR, Optro, AuditBoard
Explore Jobs