Senior Security GRC Engineer

🕒 Agosto 11

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 31%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Mozilla

SiteLinkedInTodas as Vagas

501 - 1000 funcionários

Fundada em 1998

👥 B2C

🔒 Cibersegurança

B2C • Cybersecurity • Software

A Mozilla é uma organização sem fins lucrativos dedicada a promover uma internet aberta e acessível. Eles são os criadores do popular navegador Firefox, que enfatiza a privacidade do usuário, velocidade e controle. A Mozilla também oferece uma gama de produtos que focam na segurança e privacidade na internet, incluindo o Mozilla VPN, Firefox Relay e Mozilla Monitor. Além disso, a organização está envolvida em projetos de código aberto, inovação em IA e defesa dos direitos digitais. A Mozilla visa capacitar os usuários com tecnologia e políticas confiáveis que protejam a privacidade, apoiem o desenvolvimento de IA de código aberto e promovam a responsabilidade das empresas de tecnologia.

Descrição

• Maintain and mature the ISMS, including the Statement of Applicability (SoA), risk treatment plans, and the Management Review Meeting (MRM) process and cadence. • Support ISO 27001 and SOC 2 Type 2 audit execution by helping determine scope, preparing evidence and narrative artifacts, participating in auditor interviews and walkthroughs, and resolving auditor findings. • Contribute to the SOC 2 System Description and other audit-specific narrative documentation. • Track gaps and remediation efforts arising from readiness assessments and audits. • Lead the policy program, including policy creation, revision, and cross-functional review cycles. • Support compliance scaling as additional products or business units pursue readiness assessments and certification. • Support the internal audit function, partnering with internal or third-party resources as needed to meet ISO 27001's internal audit requirements. • Partner with Engineering, IT, Legal, Privacy, People teams, and product leadership to gather evidence, drive control ownership, and translate compliance requirements into practical, adoptable practices. • Advise the GRC manager and broader Security leadership on audit risk, certification readiness, and compliance program strategy.

🎯 Requisitos

• 5 years of experience in information security, GRC, or compliance-focused roles. • Deep familiarity with ISO 27001 and SOC 2 Trust Services Criteria, gained through meaningful involvement in audits from readiness through certification. • Comfort operating across the full breadth of an ISMS—SoA maintenance, Management Review Meetings, and System Description authorship. • Demonstrated experience writing and revising security policies, including running cross-functional review cycles to gain organization-wide buy-in and adoption. • Experience tracking gaps and remediation plans and connecting that work to an organization's broader compliance and risk program. • Excellent cross-functional collaboration skills—comfortable working with engineers, product managers, legal, and executive stakeholders, and able to translate compliance requirements into practical, actionable workflows. • Ability to ramp up quickly and operate with a high degree of independence. • Comfort building processes where none yet exist. • Strong written and verbal communication skills; ability to represent Mozilla credibly and confidently in front of external auditors. • Relevant industry certifications (e.g., CISA, CISSP, ISO 27001 Lead Auditor/Implementer) are a plus.

🏖️ Benefícios

• Generous performance-based bonus plans to all eligible employees—we share in our success as one team. • Rich medical, dental, and vision coverage. • Generous retirement contributions with 100% immediate vesting (regardless of whether you contribute). • Quarterly all-company wellness days where everyone takes a pause together. • Country-specific holidays plus a day off for your birthday. • One-time home office stipend. • Annual professional development budget. • Quarterly well-being stipend. • Considerable paid parental leave. • Employee referral bonus program. • Other benefits (life/AD&D, disability, EAP, etc.—varies by country).

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo