Security Compliance, GRC Engineer

Highlights

• Automate compliance monitoring, evidence collection and control testing at scale.
• Embed policy-as-code to enforce governance across cloud and on-prem environments.
• Build real-time dashboards for risk exposure and compliance visibility.

What they offer

• Healthcare coverage
• Parental leave
• Retirement plans
• Relocation support
• Wellness programs
• Meal and transportation allowances

Ideal candidate

Pragmatic and rigorous GRC professional with 5+ years in governance and risk who loves automating manual work and collaborating across engineering, security and legal to embed compliance by design.

Requirements

• 5+ years in Governance, Risk, and Compliance (GRC), IT audit, cybersecurity, or a related field
• Hands-on experience with GRC tools
• Deep knowledge of compliance frameworks such as ISO 27001, SOC 2, NIST CSF, COBIT, or regulatory requirements like GDPR, NIS2, or HIPAA
• Proficiency in scripting and automation to streamline GRC processes
• Strong understanding of IT controls, risk assessment methodologies, and security best practices
• Experience with SIEM, IAM, or vulnerability management tools
• Familiarity with cloud security and compliance (e.g., AWS, Azure, or GCP security controls)
• Ability to analyze complex data, identify trends, and develop actionable insights
• Rigor in managing documentation, controls, and compliance evidence
• Ability to work effectively with cross-functional teams, including IT, Security, Legal, and Business units
• Clear and concise written and verbal communication skills
• Professional proficiency in English; French proficiency is a plus
• Certifications such as CISSP, CISM, CRISC, CISA, ISO 27001 Lead Auditor/Implementer