Senior GRC Engineer

Overview

Design, scale, and automate security governance, risk, and compliance frameworks. Bridge compliance requirements and technical execution through control libraries, framework mapping, evidence automation, and audit-readiness initiatives.

What you'll do

• Build and maintain reusable security and compliance control libraries.
• Map regulatory and industry standards into actionable control definitions.
• Define evidence artifacts, validation logic, and assessment criteria.
• Partner with engineering and security teams on evidence pipelines and continuous compliance monitoring.
• Create JSON/YAML compliance content and metadata rule libraries.
• Implement and map NIST and ISO control frameworks across technical environments.
• Refine GRC workflows, tooling, and framework content.

What you'll need

• Hands-on experience implementing and mapping ISO 27001/27002 and NIST SP 800-53, CSF, or RMF frameworks.
• Experience preparing technical environments and control owners for external audits.
• Deep understanding of risk assessment, control testing, and remediation workflows.
• Understanding of AWS, Azure, or GCP, IAM, and core security technologies.
• Experience using JSON or YAML for validation logic or control metadata.
• Knowledge of evidence mapping, automated evidence validation, and compliance testing.
• Strong analytical, technical communication, documentation, and precision skills.

Nice to have

• Experience with PCI DSS, SOC 2, or CIS Controls.
• CISA, CRISC, CISM, or CISSP certification.
• Experience with GRC automation platforms such as ServiceNow GRC, Vanta, Drata, Anecdotes, or custom platforms.
• Background in software engineering, security engineering, or compliance automation.

Details

• Location: Pune