GRC Engineer

About our client:

Our client is a Security & Compliance Service Growth firm that specializes in transforming security and compliance from a perceived obstacle into a strategic growth enabler. Whether you're pursuing SOC 2, ISO 27001, CMMC, NIST CSF, or another framework, they don't just advise. They execute with precision.

Our values

The GRC Engineer is a strategic, high-impact position for someone who can serve as a dependable leader.

This role is built for a proactive professional who independently drives complex compliance initiatives and stays ahead of emerging regulatory trends. You will work across a diverse client base, building rapport with stakeholders to ensure consistent progress on control implementation and audit readiness.

The ideal candidate brings a high degree of technical autonomy and a specialized GRC background with both implementer and auditor experience.

Core Requirements

• Hands-on implementer and auditor experience: Professional auditing experience, plus experience building a security program on the implementation side.

• Framework expertise: Expert, hands-on experience leading Cybersecurity Maturity Model Certification (CMMC) Level 2 projects and standing up ISO 27001 Information Security Management Systems (ISMS) from scratch.

• Microsoft GCC High: Direct experience managing and operating within Microsoft GCC High environments to maintain strict compliance standards.

• Security engineering aptitude: Technically proficient and comfortable navigating cloud environments, with the agility to serve as a technical backup for broader operational tasks.

• Security leadership mindset: A big-picture, risk-based approach to building defensible security programs, with the ability to design and implement programs that are not just compliant, but practical too.

• Proactive ownership: A self-starter committed to tracking emerging regulatory trends, executive orders, and framework updates to proactively evolve internal and client policies.

Preferred Qualifications

• Incident response and security operations: Ability to facilitate and support incident response tabletop exercises, and to create and leverage playbooks for security events.

Frameworks, Platforms, and Environments

Compliance Frameworks & Standards

Platforms & Environments

• SOC 2

• Amazon Web Services (AWS)

• ISO 27001

• Microsoft Azure

• CMMC

• Microsoft GCC High

• NIST 800-171

• GRC automation platforms

What They Offer

• Health and dental insurance

• 401(k) plan and Match

• Paid time off