GRC Engineer – Governance Risk and Compliance

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $115k - $140k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚔 Compliance

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Coterie

WebsiteLinkedInAll Job Openings

11 - 50 employees

👥 B2C

🛍️ eCommerce

🛒 Retail

B2C • eCommerce • Retail

Coterie is a company dedicated to providing premium diapering solutions for modern parents. Their products are designed to offer supreme softness, high absorbency, and reduced risk of leaks, blowouts, and diaper rash. Coterie's offerings include various diapering options such as The Diaper and The Pant, along with wipes, to ensure both comfort for babies and peace of mind for parents. The company emphasizes safety, offering dermatologist-tested, hypoallergenic products made from apparel-grade materials. Coterie also provides the convenience of an Auto-Renew subscription service, allowing customers to receive regular deliveries and enjoy savings. The brand is recognized with several awards for its diapering solutions, underscoring its commitment to quality and innovation in baby care.

📋 Description

• Build and maintain repeatable testing and monitoring processes for security, technology, and application controls • Define testing procedures, evidence requirements, frequency, expected results, and exception criteria • Perform control testing and document procedures, results, and conclusions • Identify control failures, process gaps, control drift, evidence deficiencies, and related risk • Investigate deficiencies and work with control owners on remediation or compensating controls • Automate evidence collection, control testing, and continuous monitoring using queries, scripts, APIs, integrations, and GRC tooling • Retrieve and validate evidence from applications and source systems for audits, assessments, and control testing • Support SOC 2, ITGC/SOX readiness, NYDFS, and other compliance activities, including walkthroughs and auditor follow-up • Maintain audit-ready evidence and testing documentation and retest remediated controls • Translate regulatory, audit, and security requirements into practical controls and testing procedures • Support technical risk assessments, remediation planning, business continuity and disaster recovery, privacy, third-party risk, governance, and regulatory compliance initiatives • Identify opportunities to use automation, AI, and other technologies to improve GRC processes • Partner with business and technical teams on assessments, remediation efforts, and GRC priorities

🎯 Requirements

• 4+ years of relevant experience in IT audit, GRC, information security, security assurance, technology risk, or related disciplines • Hands-on experience testing technical security and technology controls and supporting SOC 2, SOX/ITGC, ISO 27001, NYDFS, NIST, or similar audits or assessments • Strong understanding of identity and access management, logging and monitoring, vulnerability and endpoint management, cloud security, change management, SDLC, and backup and recovery • Ability to retrieve, interpret, and validate technical evidence, including configurations, access data, logs, vulnerability results, change records, and system-generated reports • Working knowledge of SQL, KQL, PowerShell, or similar tools • Ability to evaluate control design and operation, identify deficiencies and root causes, and recommend remediation or compensating controls • Strong analytical, communication, and professional judgment skills • Ability to work independently with technical teams, auditors, control owners, and stakeholders • Must be authorized to work in the United States without current or future visa sponsorship • Preferred: Azure, Entra ID, Microsoft 365, SIEM/SOAR, endpoint, vulnerability management, cloud and security tooling • Preferred: continuous control monitoring, automated evidence collection, APIs, scripting, or integrations • Preferred: GRC/IRM platforms such as Optro/AuditBoard • Preferred: insurance, financial services, fintech, or regulated-industry experience • Preferred: familiarity with NYDFS 23 NYCRR Part 500, NAIC, PCI DSS, or NIST CSF • Preferred: CISA, CRISC, CISSP, CISM, Security+, or similar certification

🏖️ Benefits

• 100% remote • Health insurance through Aetna (100% of premiums paid) • Dental and vision insurance through Guardian (100% of premiums paid) • Basic life insurance (100% of premiums paid) • Flexible spending account (FSA) or health savings account (HSA) • 401K plan with up to 4% match and immediate vesting • Flexible PTO policy offering up to 4 weeks in the first 12 months • Typically up to 5 weeks of PTO per calendar year thereafter • 12 company-paid holidays each year • Continuing education annual stipend