Staff GRC Analyst - Remote

Overview

Engine is seeking a highly-skilled and motivated Senior GRC (Governance, Risk, and Compliance) Analyst to join our team. You will be responsible for strengthening our security posture, ensuring compliance with critical standards, and managing audits, risk assessments, and compliance tracking across the organization.

In Short

• Lead the configuration and management of GRC tools.
• Manage the main dashboard for SOC 2 reporting.
• Develop and maintain a comprehensive risk management program.
• Conduct regular audits across business, IT, and security processes.
• Oversee the development and execution of security procedures.
• Develop and maintain Contingency Planning strategies.
• Execute routine operational tasks related to security awareness training.
• Audit the access and compliance of third-party vendors.
• Review procurement requests for security standards.
• Collaborate cross-functionally to identify and monitor security controls.

Requirements

• Proven experience in managing GRC functions.
• Strong understanding of compliance standards like SOC 2 and GDPR.
• Excellent organizational and communication skills.
• Ability to manage complex GRC initiatives.
• Skilled in using GRC platforms and tools.
• Strong knowledge of security concepts and risk management.
• Track record of building security/GRC programs.
• Certifications such as CISA, CISM, CISSP.
• Experience with data protection and privacy law compliance.
• Familiarity with cloud security components.

Benefits

• Competitive base pay tied to role and experience.
• Opportunities for bonuses, commissions, and equity.
• Environments for Success: hybrid-hub model for remote or office work.