GRC Engineer

Join our team as a GRC Engineer, where you will own day-to-day GRC operations, perform risk assessments, drive continuous compliance programs, and complete third-party security reviews. You will also improve the efficiency and consistency of vendor assessments, establish automated control monitoring systems, and administer GRC platforms. The ideal candidate will have 5-8 years of experience in security GRC, risk management, or compliance program ownership, and possess strong organizational and communication skills.

• Own day-to-day GRC operations, including performing risk assessments, driving continuous compliance programs, and completing third-party security reviews.
• Perform and improve security risk assessments, maintain the risk register, and partner with risk owners to drive risk remediation and mitigation.
• Own the third-party risk management lifecycle, including vendor intake, risk-based tiering, security assessments, due diligence, ongoing monitoring, and remediation.

• Bachelor’s or Master’s in Information Security, Computer Science, Engineering, or a related field
• 5–8 years of experience in security GRC, risk management, or compliance program ownership
• Strong organizational skills and ability to manage multiple priorities under tight deadlines
• Strong written and verbal communication skills with technical execution rigor
• Active security certification (e.g. CISSP, CISA, CISM, AIGP, ISO 27001 Lead Auditor)
• Proven experience building scalable GRC automations using AI agents, custom tooling, or scripting
• Don’t meet every single requirement? If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles
• Software engineering or technical background building automations for evidence collection, control validation, or audit workflows
• Experience defining security metrics/KPIs and executive reporting frameworks
• Experience completing customer security questionnaires and assurance reviews
• Exposure to automotive security and safety standards (e.g., ISO 21434, ISO 26262)