Senior Security Engineer, Komodo Health

• Strong experience with GRC frameworks and tools
• Proficiency in conducting risk assessments and audits
• Knowledge of regulatory requirements and compliance management
• Excellent communication and collaboration skills
• Strong problem-solving and analytical skills
• Experience with developing and implementing GRC policies and procedures
• Familiarity with AWS systems and services
• Additional skills and experience we’d prioritize (nice to have)…

Desirable

• This role exists to enhance Komodo Health's security posture by ensuring effective governance, risk management, and compliance
• The GRC Engineer will manage compliance initiatives, conduct risk assessments, and develop policies and procedures to protect sensitive data and maintain system integrity
• This role will also contribute to continuous improvement in our GRC processes and ensure alignment with industry standards and regulations
• As a GRC Engineer, you will play a critical role in securing our systems and data while ensuring compliance with regulatory requirements
• You will have the opportunity to work with cutting-edge GRC technologies, collaborate with cross-functional teams, and influence the development of our GRC strategy
• Your work will directly impact the security and efficiency of our operations, providing a foundation for the company's continued growth and innovation
• Looking back on your first 12 months at Komodo Health, you will have…
• Successfully implemented optimizations to our GRC framework that align with industry standards
• Conducted regular risk assessments and developed mitigation strategies
• Ensured continuous compliance with relevant regulations and internal policies
• Developed and implemented robust GRC policies and procedures
• Enhanced the company's overall security posture through effective governance and risk management practices
• You will accomplish these outcomes through the following responsibilities…
• Develop and implement GRC policies and procedures
• Conduct regular risk assessments and audits
• Ensure compliance with industry standards and regulations
• Collaborate with cross-functional teams to address compliance issues
• Monitor and report on the effectiveness of GRC initiatives
• Provide GRC-related training and support to other teams
• Partner with HR to ensure alignment and integration between GRC systems and key HR systems, facilitating seamless onboarding and offboarding processes and maintaining accurate access controls