Senior GRC Engineer – Security Engineer I

🔥 10 hours ago

☕ Washington – Remote

☕ Washington – Remote

💵 $145k - $193.8k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Smartsheet

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2005

💼 Consulting

🏥 Healthcare

📣 Marketing

Consulting • Healthcare • Marketing

Smartsheet is a platform designed to manage projects, automate workflows, and build solutions at scale. It offers a wide range of features including automation, team collaboration, dashboards and reporting, and integrations, allowing businesses to streamline their operations. The platform caters to diverse use cases such as project management, IT portfolio management, marketing management, and more, serving various industries including government, finance, and healthcare. Smartsheet also emphasizes security and data protection, ensuring users' data privacy. Additionally, it offers professional services like consulting, training, and implementation support to maximize the platform's capabilities.

📋 Description

• Own control automation for SOC 2, ISO 27001/27017/27701, HIPAA, and related commercial frameworks • Design and build automated evidence collection and continuous control monitoring across cloud, identity, endpoint, and SaaS systems • Express controls, control tests, and cross-framework mappings as version-controlled code • Translate compliance requirements into technical control logic, workflows, and integrations • Partner with engineering, IT, and security teams to embed controls into existing systems and pipelines • Participate in architecture and design reviews and define control requirements as acceptance criteria • Design self-service compliance experiences, guardrails, paved-road patterns, and tool-integrated compliance feedback • Evaluate control effectiveness against relevant risk and propose alternative controls when needed • Support full SOC 2, ISO, and HIPAA audit cycles, including evidence requests, evidence library maintenance, auditor follow-ups, and remediation tracking • Build dashboards and reporting for control health, evidence freshness, and audit readiness • Reduce duplicate evidence-gathering through cross-framework control mapping • Diagnose recurring control failures or stale evidence and fix underlying process, tooling, or ownership gaps • Partner with the GRC Team Lead and SATellite engineering to extend the internal GRC platform

🎯 Requirements

• 4+ years of experience in GRC engineering, security engineering, compliance automation, or IT audit support, with hands-on ownership of at least one full certification cycle (SOC 2, ISO 27001, or similar) • Practical, hands-on experience with GRC or compliance automation platforms (Vanta, Drata, Secureframe, or a homegrown equivalent), including configuring integrations and building evidence pipelines • Experience with cloud security fundamentals (AWS/GCP/Azure IAM, logging, encryption) and how they map to control requirements • Solid working knowledge of SOC 2, ISO 27001, ISO 27017/27701, and HIPAA control requirements • Ability to map controls across frameworks to avoid duplicated evidence work • Comfort with scripting or light development (Python, JavaScript, or similar) to build integrations, automate evidence pulls via API, or extend GRC tooling • Strong written communication • Stakeholder-centric mindset focused on making compliance easy for engineers • Ability to trace control failures or audit findings to root causes and drive durable fixes across teams • Legally eligible to work in the U.S. on an ongoing basis

🏖️ Benefits

• Employer subsidized medical/vision and dental coverage for full-time employees • 401k Match to help you save for your future (50% of your contribution up to the first 6% of your eligible pay) • Monthly stipend to support your work and productivity • Flexible Time Away Program, plus Sick Time Off • US employees are automatically covered under Smartsheet-sponsored life insurance, short-term, and long-term disability plans • US employees receive 12 paid holidays per year • Up to 24 weeks of Parental Leave • Personal paid Volunteer Day to support our community • Opportunities for professional growth and development including access to Udemy online courses • Company Funded Perks, including a counseling membership, local retail discounts, and your own personal Smartsheet account • Teleworking options from any registered location in the U.S. (role specific) • Market competitive incentive opportunity

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume