Senior GRC Engineer – Security Engineer I

🔥 8 horas atrás

☕ Washington – Remoto

☕ Washington – Remote

💵 $145.000 - $193.750 / ano

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Smartsheet

SiteLinkedInTodas as Vagas

1001 - 5000 funcionários

Fundada em 2005

💼 Consultoria

🏥 Saúde

📣 Marketing

Consulting • Healthcare • Marketing

Smartsheet é uma plataforma projetada para gerenciar projetos, automatizar fluxos de trabalho e construir soluções em larga escala. Ela oferece uma ampla gama de recursos, incluindo automação, colaboração em equipe, painéis e relatórios, e integrações, permitindo que as empresas otimizem suas operações. A plataforma atende a diversos casos de uso, como gestão de projetos, gestão de portfólio de TI, gestão de marketing e mais, servindo a várias indústrias, incluindo governo, finanças e saúde. Smartsheet também enfatiza a segurança e proteção de dados, garantindo a privacidade dos dados dos usuários. Além disso, oferece serviços profissionais como consultoria, treinamento e suporte à implementação para maximizar as capacidades da plataforma.

Descrição

• Own control automation for SOC 2, ISO 27001/27017/27701, HIPAA, and related commercial frameworks • Design and build automated evidence collection and continuous control monitoring across cloud, identity, endpoint, and SaaS systems • Express controls, control tests, and cross-framework mappings as version-controlled code • Translate compliance requirements into technical control logic, workflows, and integrations • Partner with engineering, IT, and security teams to embed controls into existing systems and pipelines • Participate in architecture and design reviews and define control requirements as acceptance criteria • Design self-service compliance experiences, guardrails, paved-road patterns, and tool-integrated compliance feedback • Evaluate control effectiveness against relevant risk and propose alternative controls when needed • Support full SOC 2, ISO, and HIPAA audit cycles, including evidence requests, evidence library maintenance, auditor follow-ups, and remediation tracking • Build dashboards and reporting for control health, evidence freshness, and audit readiness • Reduce duplicate evidence-gathering through cross-framework control mapping • Diagnose recurring control failures or stale evidence and fix underlying process, tooling, or ownership gaps • Partner with the GRC Team Lead and SATellite engineering to extend the internal GRC platform

🎯 Requisitos

• 4+ years of experience in GRC engineering, security engineering, compliance automation, or IT audit support, with hands-on ownership of at least one full certification cycle (SOC 2, ISO 27001, or similar) • Practical, hands-on experience with GRC or compliance automation platforms (Vanta, Drata, Secureframe, or a homegrown equivalent), including configuring integrations and building evidence pipelines • Experience with cloud security fundamentals (AWS/GCP/Azure IAM, logging, encryption) and how they map to control requirements • Solid working knowledge of SOC 2, ISO 27001, ISO 27017/27701, and HIPAA control requirements • Ability to map controls across frameworks to avoid duplicated evidence work • Comfort with scripting or light development (Python, JavaScript, or similar) to build integrations, automate evidence pulls via API, or extend GRC tooling • Strong written communication • Stakeholder-centric mindset focused on making compliance easy for engineers • Ability to trace control failures or audit findings to root causes and drive durable fixes across teams • Legally eligible to work in the U.S. on an ongoing basis

🏖️ Benefícios

• Employer subsidized medical/vision and dental coverage for full-time employees • 401k Match to help you save for your future (50% of your contribution up to the first 6% of your eligible pay) • Monthly stipend to support your work and productivity • Flexible Time Away Program, plus Sick Time Off • US employees are automatically covered under Smartsheet-sponsored life insurance, short-term, and long-term disability plans • US employees receive 12 paid holidays per year • Up to 24 weeks of Parental Leave • Personal paid Volunteer Day to support our community • Opportunities for professional growth and development including access to Udemy online courses • Company Funded Perks, including a counseling membership, local retail discounts, and your own personal Smartsheet account • Teleworking options from any registered location in the U.S. (role specific) • Market competitive incentive opportunity

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo