Lead Engineer- Product GRC (SaaS -Technical Compliance & Automation)

Be the one building AI-powered experiences where they matter most.

At Genesys, we help organizations create better customer experiences through AI-powered experience orchestration. Our platform connects people, systems, data and AI to help organizations deliver more personalized service, improve operational efficiency and build stronger customer relationships.

Help build, support and operate technology used by more than 8,000 organizations in over 100 countries – moving AI from possibility to production in real-world enterprise environments every day.

As the Lead Engineer– Product GRC, you will be a key member of the GRC working closely with the Information Security and Privacy team responsible for driving governance, risk, and compliance (GRC) programs across our product and cloud environments, applying industry best practices.
 

You’ll act as the bridge between security, engineering, product, and legal / privacy teams, ensuring that governance controls and risk management practices are seamlessly embedded into how the company builds, operates, and delivers its products.

This role suits an experienced GRC professional with solid, hands-on experience running compliance and risk programs, who can translate regulatory and framework requirements into practical, scalable controls grounded in industry best practices.

• Proactively evaluate and advise the business on new and evolving certification programs, regulatory requirements, and technologies.
• Own the GRC roadmap for SaaS operations, aligning with frameworks and standards and regulatory requirements like SOC 2, ISO 27001, ISO 42001, NIST CSF, HIPAA, HITRUST, ENS, HDS, GDPR etc.
• Design and implement scalable compliance workflows and processes that support cloud and product operations, in line with industry best practices.
• Collaborate with Legal, Privacy, and Security Engineering to ensure controls support regulatory, contractual, and data privacy requirements.
• Develop and maintain policies, standards, and risk frameworks that reflect both business needs and evolving threat landscapes.

• Lead the automation of evidence collection, control testing, and compliance monitoring using GRC and workflow management tools.  
• Work with engineering and product teams to embed compliance checks into the software development lifecycle, applying policy-as-code and other industry best practices where appropriate.
• Conduct compliance validation of product and cloud architecture, access management, data protection, and logging controls.
• Build and maintain dashboards and KPIs for continuous visibility into compliance posture.

• Conduct and automate risk assessments, control effectiveness reviews, and technical remediation tracking.
• Implement and manage continuous control monitoring (CCM) for real-time risk identification.
• Collaborate with product and engineering teams to perform technical risk reviews during product design and deployment.

• Serve as the technical SME for external audits and certification processes (SOC 2, ISO 27001, PCI-DSS, HIPAA, HDS, ENS, ISO 42001 etc.).
• Manage audit evidence preparation, ensuring traceability from policies to controls and technical implementation.
• Lead post-audit reviews and ensure timely closure of findings.

• Mentor junior GRC and security analysts on automation tools and control implementation best practices.
• Partner with engineering and product teams to drive a strong culture of compliance and risk awareness.
• Collaborate closely with privacy and data protection officers on compliance alignment

• Bachelor’s or Master’s degree in Information Security, Risk Management, Computer Science, or a related field.
• 8–12 years of experience in information security, GRC, or product/technology compliance, with solid hands-on experience running GRC programs in SaaS or technology environments.
• Proven, hands-on experience designing and operating compliance programs aligned with industry best practices for SaaS or multi-tenant technology platforms.

• CISSP, CISM, CRISC, or CISA
• ISO 27001 Lead Auditor/Implementer
• Cloud certifications such as AWS Certified Security – Specialty, Azure Security Engineer Associate, or CCSP are highly preferred. 
•  Core Expertise Solid understanding of security and risk concepts, including access management, data protection, and encryption standards and other domains.
• Familiarity with automation and scripting concepts (e.g., Python) is a plus but not required.
• General familiarity with modern DevOps/DevSecOps practices is a plus, though deep tooling expertise is not required.
• Hands-on experience with GRC platforms and compliance tools, applied per industry best practices
• undefined

• Strong communication and stakeholder management skills.
• Analytical thinker with the ability to translate compliance requirements into technical reality.
• Influencer who can lead without direct authority in a cross-functional setting.

In a fast-scaling SaaS environment, compliance is not just a checkbox—it’s a differentiator.
The Lead Engineer – Product GRC ensures our customers, auditors, and partners trust that compliance is embedded in our DNA, applying industry best practices to keep our products secure, compliant, and scalable.

Employee Referral

If a Genesys employee referred you, please apply using the link they shared so we can connect your application to their referral.

About Genesys:

Genesys® empowers more than 8,000 organizations worldwide to create the best customer and employee experiences. Genesys Cloud™ is the Agentic Orchestration Platform that securely connects people, systems, data and AI across the enterprise with built-in governance and control. As a result, organizations can drive customer loyalty, growth and retention while increasing operational efficiency and teamwork across human and AI workforces. To learn more, visit www.genesys.ai. 

Reasonable Accommodations:

If you require a reasonable accommodation to complete any part of the application process, or are limited in your ability to access or use this online application and need an alternative method for applying, you or someone you know may contact us at reasonable.accommodations@genesys.com.

You can expect a response within 24–48 hours. To help us provide the best support, click the email link above to open a pre-filled message and complete the requested information before sending. If you have any questions, please include them in your email.

This email is intended to support job seekers requesting accommodations. Messages unrelated to accommodation—such as application follow-ups or resume submissions—may not receive a response.

Genesys is an equal opportunity employer committed to fairness in the workplace. We evaluate qualified applicants without regard to race, color, age, religion, sex, sexual orientation, gender identity or expression, marital status, domestic partner status, national origin, genetics, disability, military and veteran status, and other protected characteristics.

Please note that recruiters will never ask for sensitive personal or financial information during the application phase.