Senior Security Engineer – GRC Engineering

🔥 1 minute ago

🇮🇳 India – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 11%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

One Identity

WebsiteLinkedInAll Job Openings

501 - 1000 employees

🔒 Cybersecurity

☁️ SaaS

🏢 Enterprise

💰 $3M Venture Round on 2004-07

Cybersecurity • SaaS • Enterprise

One Identity is a company that specializes in identity and access management solutions, focusing on protecting digital identities and simplifying user access across organizations. They offer a comprehensive suite of products designed to secure privileged access, govern user identities, and streamline compliance with regulations through automation. Their platform integrates AI-driven insights to enhance security and operational efficiency, supporting both on-premises and cloud environments.

📋 Description

• Own continuous control monitoring end to end across identity providers, cloud control planes, code repositories, endpoint management, and ticketing • Build alerting, escalation, and remediation confirmation for degraded controls • Build a centralized common controls framework based on ISO 27001 and SOC 2 • Map additional frameworks to the common controls framework • Capture, timestamp, index, and assemble audit-ready evidence on demand • Ensure the evidence system operates within and logs its own controls • Write control validation as code and produce auditor-accepted, engineer-actionable outputs • Create pull-request-based corrections against pipelines, policies, or configurations • Partner with infrastructure engineering on policy as code and evidence emission • Define appropriate uses of agentic workflows for control mapping, evidence classification, and validation • Own the compliance engineering program's direction, framework priorities, automation priorities, and engineering allocation • Advance metrics covering control health, framework coverage, remediation velocity, and trends • Integrate cyber risk management, risk registers, and exception handling with control telemetry • Own automated asset prioritization to inform risk decisions, control coverage, and remediation order • Lead the technical side of audits and explain control implementation and evidence production to assessors

🎯 Requirements

• Six or more years across compliance program leadership and security or compliance engineering, including experience on both the framework side and the build side; equivalent depth counts • Experience leading a major framework through assessment from readiness through certification or authorization, such as FedRAMP or comparable, or owning GRC engineering end to end with control telemetry, continuous monitoring, and evidence automation • Strategic framework design and control mapping across frameworks • Recent hands-on Python and API integration experience • Hands-on building with AI in the loop within the last six months, including verification of tooling output • Framework fluency across ISO 27001 and SOC 2 • Familiarity with FedRAMP 20x, NIS2, DORA, and PCI DSS • Knowledge of policy-as-code frameworks and cloud enforcement • Sufficient Azure and AWS experience to identify where evidence resides • Experience with a compliance automation platform • Ability to run an audit calendar and assessor relationship • Ability to write for both auditors and engineers • Helpful: assessor-side experience; IRAP or another non-US regime; evidence work across hosted services and customer-deployed software; prior software or platform engineering experience

🏖️ Benefits

• Health and wellness programs • Career development opportunities • Programs supporting employees in pursuing fulfilling careers • Opportunities to learn and grow • Equal employment opportunity and harassment-free work environment