GRC Engineer, Applied Intuition

• 1-3 years or more of relevant experience in risk-based technology compliance management programs, or Auditing experience
• Experience in performing risk-based testing for control compliance, including the identification, assessment, and mitigation of compliance issues: understanding how to balance the company's risk appetite to compliance needs/requirements
• Detailed knowledge and experience with technology controls across a variety of industry frameworks and how to assess controls supporting compliance for SOC2, ISO 27001, Tisax and privacy
• Experience developing dynamic approaches to the implementation of a technology compliance program utilizing a variety of testing methods, both manual and automated, to provide qualitative and quantitative results where applicable

Desirable

• We are looking for a multifaceted GRC Engineer who can lead our compliance initiatives across the organization. You will be responsible for ensuring adequate security controls to manage risk across the organization
• Additionally, you will collaborate with legal, engineering and operations teams to ensure compliance with all relevant security requirements
• Facilitate risk assessments and control reviews to accommodate new business areas as well as changes in processes
• Plan, design and execute controls testing, controls assessment and risk management across all domains for IT General Controls and other GRC requirements, as appropriate in support of multiple frameworks (e.g. ISO27001, SOC2, Tisax)
• Conduct risk assessments against products, features, datasets, applications, and Third Party Risk Management (TPRM)
• Partner to evaluate the design and effectiveness of the technical and operational control environment
• Validate information security key controls to identify control risks, analyze root causes and trends in potential control weaknesses; suggest new controls to meet GRC standards where applicable
• Execute strategies for ensuring organizational compliance with SOC2, ISO27001, Tisax, Data Privacy, federal, state, and local government compliance, or similar regulations
• Assist in the development and implementation of compliance training and awareness programs