GRC Engineer – Governance Risk and Compliance

Vaga não está no LinkedIn

🕒 Outubro 22

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $115.000 - $140.000 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

🚔 Conformidade

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 19 dias.
• As vagas desta empresa costumam ser preenchidas em 35 dias.

Candidatar-se

Encontrar Vagas Remotas Similares

Coterie

SiteLinkedInTodas as Vagas

11 - 50 funcionários

👥 B2C

🛍️ Comércio Eletrônico

🛒 Varejo

B2C • eCommerce • Retail

A Coterie é uma empresa dedicada a fornecer soluções premium de fraldas para pais modernos. Seus produtos são projetados para oferecer extrema maciez, alta absorção e menor risco de vazamentos, explosões e assaduras. As ofertas da Coterie incluem várias opções de fraldas, como The Diaper e The Pant, além de lenços umedecidos, para garantir conforto tanto para os bebês quanto tranquilidade para os pais. A empresa enfatiza a segurança, oferecendo produtos testados por dermatologistas, hipoalergênicos e feitos com materiais de qualidade de vestuário. A Coterie também oferece a conveniência de um serviço de assinatura Auto-Renew, permitindo que os clientes recebam entregas regulares e aproveitem economias. A marca é reconhecida com vários prêmios por suas soluções de fraldas, destacando seu compromisso com a qualidade e inovação no cuidado infantil.

Descrição

• Build and maintain repeatable testing and monitoring processes for security, technology, and application controls • Define testing procedures, evidence requirements, frequency, expected results, and exception criteria • Perform control testing and document procedures, results, and conclusions • Identify control failures, process gaps, control drift, evidence deficiencies, and related risk • Investigate deficiencies and work with control owners on remediation or compensating controls • Automate evidence collection, control testing, and continuous monitoring using queries, scripts, APIs, integrations, and GRC tooling • Retrieve and validate evidence from applications and source systems for audits, assessments, and control testing • Support SOC 2, ITGC/SOX readiness, NYDFS, and other compliance activities, including walkthroughs and auditor follow-up • Maintain audit-ready evidence and testing documentation and retest remediated controls • Translate regulatory, audit, and security requirements into practical controls and testing procedures • Support technical risk assessments, remediation planning, business continuity and disaster recovery, privacy, third-party risk, governance, and regulatory compliance initiatives • Identify opportunities to use automation, AI, and other technologies to improve GRC processes • Partner with business and technical teams on assessments, remediation efforts, and GRC priorities

🎯 Requisitos

• 4+ years of relevant experience in IT audit, GRC, information security, security assurance, technology risk, or related disciplines • Hands-on experience testing technical security and technology controls and supporting SOC 2, SOX/ITGC, ISO 27001, NYDFS, NIST, or similar audits or assessments • Strong understanding of identity and access management, logging and monitoring, vulnerability and endpoint management, cloud security, change management, SDLC, and backup and recovery • Ability to retrieve, interpret, and validate technical evidence, including configurations, access data, logs, vulnerability results, change records, and system-generated reports • Working knowledge of SQL, KQL, PowerShell, or similar tools • Ability to evaluate control design and operation, identify deficiencies and root causes, and recommend remediation or compensating controls • Strong analytical, communication, and professional judgment skills • Ability to work independently with technical teams, auditors, control owners, and stakeholders • Must be authorized to work in the United States without current or future visa sponsorship • Preferred: Azure, Entra ID, Microsoft 365, SIEM/SOAR, endpoint, vulnerability management, cloud and security tooling • Preferred: continuous control monitoring, automated evidence collection, APIs, scripting, or integrations • Preferred: GRC/IRM platforms such as Optro/AuditBoard • Preferred: insurance, financial services, fintech, or regulated-industry experience • Preferred: familiarity with NYDFS 23 NYCRR Part 500, NAIC, PCI DSS, or NIST CSF • Preferred: CISA, CRISC, CISSP, CISM, Security+, or similar certification

🏖️ Benefícios

• 100% remote • Health insurance through Aetna (100% of premiums paid) • Dental and vision insurance through Guardian (100% of premiums paid) • Basic life insurance (100% of premiums paid) • Flexible spending account (FSA) or health savings account (HSA) • 401K plan with up to 4% match and immediate vesting • Flexible PTO policy offering up to 4 weeks in the first 12 months • Typically up to 5 weeks of PTO per calendar year thereafter • 12 company-paid holidays each year • Continuing education annual stipend

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo