Senior GRC Engineer

CanadaRemoteFull-time

Other

2 views0 saves0 applied

Apply Now

Quick Summary

Key Responsibilities

Lead SOC 2, TISAX, and DORA audit remediation initiatives, ensuring findings are addressed within established deadlines. Manage enterprise risk assessment and treatment processes,

Technical Tools

Other

The Senior GRC Engineer will lead enterprise-wide governance, risk, and compliance initiatives, ensuring the organization meets critical security standards and regulatory obligations. You will oversee active audit and remediation programs across frameworks such as SOC 2, TISAX, and DORA, helping resolve findings within strict deadlines. Working closely with business units, executives, and external auditors, you will strengthen control environments and improve transparency around organizational risk. You will also develop governance metrics and reporting dashboards that provide clear, reliable insights to customers and senior leadership. This role offers the opportunity to move compliance practices from reactive remediation toward proactive risk management. Join a remote-first environment where accountability, collaboration, and data-driven decision-making are central to the work.

You will take ownership of governance, risk, and compliance activities across multiple enterprise frameworks, driving audit readiness, remediation, and continuous improvement. Your responsibilities will include:

Lead SOC 2, TISAX, and DORA audit remediation initiatives, ensuring findings are addressed within established deadlines.
Manage enterprise risk assessment and treatment processes, including maintaining risk registers and coordinating risk acceptance reviews.
Direct audit evidence collection, control documentation, finding resolution, and audit coordination across applicable frameworks.
Develop and maintain governance metrics, Key Risk Indicators (KRIs), and reporting dashboards for customers, executives, and board-level stakeholders.
Build, maintain, and improve enterprise control frameworks aligned with regulatory obligations, security standards, and customer requirements.
Manage Plans of Action and Milestones (POAMs), track remediation progress, and oversee vulnerability remediation governance.
Coordinate compliance activities with business units, executive leadership, and external audit partners.
Communicate audit progress, outstanding findings, risk exposure, and remediation priorities to relevant stakeholders.
Establish sustainable compliance processes that reduce remediation backlogs and strengthen ongoing audit readiness.
Promote a proactive risk management approach through accurate reporting, clear accountability, and continuous improvement.

Requirements

~2 min read

The ideal candidate combines extensive GRC experience with strong technical knowledge of security controls, audit frameworks, and enterprise risk management. They should be comfortable managing several compliance initiatives simultaneously and communicating complex risk matters to both technical and executive audiences. Key qualifications include:

At least 7 years of experience in Governance, Risk, and Compliance (GRC), audit, or compliance engineering roles.
Demonstrated success managing multiple concurrent audit engagements and remediation initiatives.
Extensive hands-on experience with SOC 2, ISO 27001, and enterprise audit processes.
Proficiency with GRC platforms such as ServiceNow, Archer, AuditBoard, or equivalent tools.
Strong technical understanding of IT controls, information security frameworks, and risk management methodologies.
Excellent written and verbal communication skills, particularly for audit coordination, exception tracking, and executive or board-level reporting.
Experience developing governance metrics, Key Risk Indicators (KRIs), and dashboards that clearly communicate organizational risk posture.
Ability to coordinate effectively across business units, leadership teams, and external auditors.
Strong organizational and project management skills, with the ability to prioritize remediation activities and deliver against fixed deadlines.

CISSP, CISM, or CRISC certification.
Experience with DORA, PCI DSS 4.0, or other European regulatory frameworks.
Background in B2B SaaS compliance and customer audit programs.
Experience managing multiple concurrent audit frameworks and regulatory examinations.
Legal authorization to work in Canada is required. Employment sponsorship is not provided.