Security Engineer - GRC (Governance, Risk & Compliance)
Skills
- Hands-on experience with GRC platforms (Vanta, Drata, ServiceNow GRC, Archer, etc.)
- Working knowledge of SOC 2 Trust Service Criteria and HITRUST CSF
- Familiarity with cloud environments (AWS or Azure) and their integration points
- Experience with API integrations, webhooks, and automation techniques
- Understanding of compliance evidence types, auditor workflows, and audit readiness
- Clear written communication for policies, control narratives, and stakeholder engagement
- Organizational skills to manage multiple compliance workstreams
Responsibilities
- Configure, administer, and improve the Vanta GRC platform across organizational entities
- Build and maintain integrations between Vanta and cloud providers (AWS/Azure), IDPs, endpoint management, HR systems, and other data sources
- Automate evidence collection and test workflows for HITRUST r2, SOC 2 Type II, and similar certifications
- Develop and maintain custom tests, policies, and controls in Vanta reflecting company risk posture
- Monitor control health, manage remediation workflows, and track failing/at-risk controls
- Run vendor risk automation and third-party assessment workflows within Vanta
- Support access review automation and maintain accurate audit documentation
- Maintain detailed GRC platform documentation, integration configs, and control mappings
- Support audit activities, customer questionnaires, and regulatory documentation (including HIPAA)
Education
- Bachelor's degree in Information Security, Computer Science, Compliance, Risk Management, or related field, or equivalent experience
- Relevant professional security certifications are a plus (CISA, CISM, CISSP, CompTIA Security+)
Benefits
- Fully remote work from anywhere in the US
- Medical, dental, and vision insurance
- FSA / HSA options
- Tuition reimbursement
- 401(k) with company match
- Competitive salary and additional health & wellness perks
- Flexible and trusting work environment
Average salary estimate
If an employer mentions a salary or salary range on their job, we display it as an "Employer Estimate". If a job has no salary data, Rise displays an estimate if available.
Cardless is looking for an experienced IT Ops Engineer to lead identity, device, and onboarding/offboarding operations for its San Francisco headquarters.
Lead the onsite technical delivery for Portfolio BI’s Stratus practice at a high-profile NYC financial services client, driving cloud and infrastructure reliability, security, and automation.
Prudential is hiring a Director of CIAM to lead strategy, implementation, and operational excellence for customer authentication, identity verification, and orchestration across its digital channels.
TENEX is hiring a Senior Threat Detection Engineer to create and operationalize advanced YARA-L detections in Google SecOps and drive proactive threat identification and response.
RaceTrac is hiring a Senior Workday Integrations Developer to lead design and support of HCM and Financials integrations using EIBs, Core Connectors, Studio, Orchestrate, and APIs.
Serve as the Service Operations Lead in AbbVie's R&D IT organization to govern application support, manage change and release activities, and drive vendor and SLA performance for mission-critical applications.
Western Alliance Bank is hiring an Automation Business Analyst to lead Power Apps, Power Automate and AI-enabled workflow automation efforts across enterprise operations.
NBCUniversal is hiring a seasoned Site Reliability Engineer to lead Nexthink-driven device analytics, automation, and endpoint reliability for its enterprise DEX program.
Weave is hiring an in‑office Global IT Operations Technician in Lehi to troubleshoot complex hardware and software issues, manage device lifecycles, and drive process improvements across corporate IT systems.
Blackstone is seeking a VP of Workforce Identity and Directory Services to lead Active Directory strategy and modernize enterprise identity across on-prem, hybrid, and cloud environments while driving security and compliance.
We are methodically reinventing how healthcare is delivered and paid for, with AI-powered products that dramatically improve efficiency, quality and accessibility of medical care.
1 jobs
🔮
Hi, I'm Risa! Your AI Career Copilot
you, just ask me below!
