Lead GRC Technologist – SaaS, Technical Compliance & Automation

Job not on LinkedIn

November 25

Apply Now

Receive Emails with Similar Jobs

Genesys

WebsiteLinkedInAll Job Openings

Artificial Intelligence • SaaS • Telecommunications

Genesys is a leading provider of AI-powered experience orchestration solutions designed to deliver personalized experiences at scale. Their offerings include comprehensive contact center software, workforce engagement management solutions, and an open platform with cloud architecture. Genesys Cloud CX and EX platforms optimize both customer and employee experiences using intelligent automation and embedded AI, allowing seamless engagement across any channel. With a focus on various industries including banking, healthcare, retail, insurance, and government, Genesys assists organizations in transforming customer and employee interaction landscapes. Additionally, their AppFoundry Marketplace offers pre-integrated applications to extend platform functionalities.

5001 - 10000 employees

Founded 1990

🤖 Artificial Intelligence

☁️ SaaS

📡 Telecommunications

📋 Description

• Proactively evaluate and advise the business on new and evolving certification programs, regulatory requirements, and technologies. • Own the GRC roadmap for SaaS operations, aligning with frameworks and standards and regulatory requirements like SOC 2, ISO 27001, ISO 42001, NIST CSF, HIPAA, HITRUST, ENS, HDS, GDPR etc. • Design and implement scalable, automated compliance workflows that support cloud (AWS) operations. • Collaborate with Legal, Privacy, and Security Engineering to ensure controls support regulatory, contractual, and data privacy requirements. • Develop and maintain policies, standards, and risk frameworks that reflect both business needs and evolving threat landscapes. • Lead the automation of evidence collection, control testing, and compliance monitoring using ITSM, JIRA and GRC tools. • Work with engineering teams to integrate compliance checks into CI/CD pipelines using Infrastructure-as-Code (IaC) and policy-as-code (Terraform, AWS Config). • Conduct compliance validation of cloud architectures, IAM, data protection, and logging controls. • Build and maintain dashboards and KPIs for continuous visibility into compliance posture. • Conduct and automate risk assessments, control effectiveness reviews, and technical remediation tracking. • Implement and manage continuous control monitoring (CCM) for real-time risk identification. • Collaborate with product and engineering teams to perform technical risk reviews during product design and deployment. • Serve as the technical SME for external audits and certification processes (SOC 2, ISO 27001, PCI-DSS, HIPAA, HDS, ENS, ISO 42001 etc.). • Manage audit evidence preparation, ensuring traceability from policies to controls and technical implementation. • Lead post-audit reviews and ensure timely closure of findings. • Mentor junior GRC and security analysts on automation tools and control implementation best practices. • Partner with engineering and DevOps to drive compliance-as-code culture. • Collaborate closely with privacy and data protection officers on compliance alignment.

🎯 Requirements

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or related field • 8–12 years of experience in information security, GRC, or cloud compliance, with at least 4 years focused on SaaS environments • Proven experience designing or automating compliance programs for cloud-native or multi-tenant SaaS platforms • Certifications (Preferred) CISSP, CISM, CRISC, or CISA ISO 27001 Lead Auditor/Implementer • Cloud certifications such as AWS Certified Security – Specialty, Azure Security Engineer Associate, or CCSP are highly preferred. • Deep understanding of cloud security controls, identity management, and encryption standards • Proficiency with automation and scripting (Python) • Familiarity with IaC / DevSecOps tools (Terraform, GitHub, Jenkins) • Experience with GRC and compliance automation platforms

🏖️ Benefits

• great benefits and perks like larger tech companies • independence to make a larger impact on the company • ownership of their work