GRC Engineer

Job not on LinkedIn

🔥 1 hour ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚔 Compliance

👻 Ghost score 15%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

TRACTIAN

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2019

🏭 Manufacturing

🔧 Hardware

🤖 Artificial Intelligence

🔥 Funding within the last year

💰 DEBT on 2026-07

Manufacturing • Hardware • Artificial Intelligence

TRACTIAN is a provider of AI-powered hardware and software for multimodal asset health and predictive maintenance. The company combines plug-and-play vibration and electrical sensors with cloud analytics and AI-driven failure diagnostics to deliver real-time monitoring, downtime prevention, unified asset health views, and CMMS/work-order integrations for asset-heavy operations. Tractian targets manufacturing, data centers, oil & gas, mining, government, and other industrial facilities and is used to scale reliability programs and reduce operational risk; the company recently reached a reported $1. 4B valuation after a $130M Series D.

📋 Description

• Develop, implement, and continuously improve information security governance, risk management, compliance, and assurance processes. • Support compliance with frameworks and standards such as ISO 27001, ISO 27002, SOC 2, and other applicable requirements. • Conduct risk assessments, evaluate security controls, maintain risk registers, and coordinate risk treatment and remediation activities. • Support internal and external audits, certification processes, evidence collection, and continuous compliance monitoring. • Develop and maintain security policies, standards, procedures, and governance documentation. • Improve Business Continuity Management (BCM), Disaster Recovery (DR), Incident Response (IR), and Third-Party Risk Management (TPRM) activities, including gap analysis, planning, exercises, and testing. • Assess secure software development practices and collaborate with Engineering teams to integrate security and compliance requirements into the Software Development Lifecycle (SDLC). • Conduct customer security and compliance due diligence, including security questionnaires, RFPs, and contractual security assessments. • Identify and implement opportunities to automate GRC processes using AI, APIs, integrations, and other technologies. • Collaborate with Engineering, Infrastructure, Security, Product, and business teams to integrate security and compliance requirements into operational and technical processes.

🎯 Requirements

• Background in Information Technology, Information Security, GRC, Internal Audit, Compliance, or related fields. • Proven hands-on experience implementing or improving information security governance, risk management, and compliance programs. • Experience with ISO 27001 / ISO 27002, SOC 2, or equivalent security frameworks. • Proven hands-on experience in Information Security Risk Management, including risk assessments, risk treatment, control evaluation, and remediation management. • Practical experience implementing or maintaining Business Continuity Management (BCM) and Disaster Recovery (DR) processes, including BIA, RTO/RPO, recovery planning, and testing. • Hands-on experience with Incident Response (IR) processes, including incident management, response procedures, exercises, and post-incident improvement. • Experience conducting Third-Party Risk Management (TPRM) assessments, evaluating vendor security controls, and managing associated risks. • Knowledge of data protection and privacy requirements, including LGPD and GDPR. • Understanding of assessing Secure Software Development practices, including SDLC security controls, code review processes, vulnerability management, etc. • Understanding of cloud infrastructure concepts, identity and access management, and cybersecurity concepts. • Experience supporting internal or external audits, compliance assessments, and evidence management. • Ability to independently assess risks, evaluate controls, and drive improvements across different GRC domains. • Ability to leverage AI, automation tools to improve workflows, solve problems, and increase operational efficiency. • Advanced Portuguese and English proficiency.

🏖️ Benefits

• Competitive Compensation • 30 days of paid annual leave • Education and courses stipend • Earn a trip anywhere in the world every 4 years • R$1.035/month for meals allowance • Health plan with national coverage and without coparticipation • Dental Insurance: we help you with dental treatment for a better quality of life. • Wellhub Membership: Access a wide range of gyms and training programs.

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume