GRC Engineer

Job not on LinkedIn

🔥 0 minutes ago

🏄 California, New York, +2 more states – Remote

🏄 California – Remote 🗽 New York – Remote 🤠 Texas – Remote ☕ Washington – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚔 Compliance

👻 Ghost score 15%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Glow

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2025

🔒 Cybersecurity

🤖 Artificial Intelligence

Cybersecurity • Artificial Intelligence

Glow is an endpoint security company that uses artificial intelligence to discover, understand, and control software running on endpoints. Its platform continuously inventories devices and software (asset intelligence), applies adaptable policies, and deploys autonomous remediation and prevention agents to reduce risk and prevent incidents. Glow emphasizes safe adoption of AI across enterprises by identifying and governing shadow AI and agentic tools, and positions itself as “The Endpoint AI Company.

📋 Description

• Build the process to own and complete customer security questionnaires, assessments, and due-diligence requests • Join customer and prospect calls to explain the company’s security posture, controls, architecture, and risk-management practices • Build and maintain reusable trust materials, including standard responses, evidence packages, security documentation, and trust-center content • Manage compliance programs and audits such as SOC 2 and ISO 27001 from readiness through evidence collection, testing, remediation, and ongoing monitoring • Automate evidence collection, control monitoring, questionnaire responses, and repetitive GRC workflows • Maintain policies, risk registers, control mappings, vendor reviews, and remediation plans • Partner with Product, Engineering, IT, Legal, Sales, and Customer Success on security and compliance requirements • Translate regulatory, contractual, and customer requirements into practical product and operational controls • Participate in product design and roadmap discussions, identifying control requirements and recommending secure, scalable, and usable solutions • Track emerging customer expectations and compliance requirements and help prioritize security-program improvements • Define metrics showing the effectiveness, efficiency, and business impact of the GRC and customer-trust program

🎯 Requirements

• Experience in GRC, security assurance, customer trust, compliance, security engineering, or a related field • Hands-on experience completing customer security questionnaires and supporting customer security reviews • Strong written and verbal communication skills, including explaining technical and compliance topics clearly to technical and non-technical audiences • Experience managing or supporting SOC 2, ISO 27001, NIST CSF, NIST 800-53, or similar frameworks • Working knowledge of SaaS and cloud security controls, including identity and access management, encryption, logging, vulnerability management, secure development, incident response, business continuity, and vendor risk • Ability to evaluate evidence critically rather than treating compliance as a checklist • Strong project-management skills and comfort coordinating work across multiple teams • Interest in using APIs, scripts, integrations, AI, or GRC platforms to reduce manual work • Curiosity about product design and building controls into systems from the beginning • Sound judgment balancing security, customer commitments, usability, and business needs • Experience at startups, B2B SaaS, cloud, infrastructure, fintech, healthcare, or other security-conscious technology companies (optional) • Familiarity with GDPR, CCPA/CPRA, HIPAA, PCI DSS, or FedRAMP (optional) • Experience with GRC automation, trust-center, or questionnaire-management platforms (optional) • Ability to read technical architecture diagrams, audit logs, configurations, and code to validate control design and evidence (optional) • Experience designing product-level controls (optional) • Relevant certifications such as CISSP, CISA, CISM, CRISC, CCSK, or ISO 27001 Lead Implementer/Auditor; certifications are helpful but not required

🏖️ Benefits

• Inclusive workplace committed to welcoming, respecting, and empowering every team member • Equal opportunity employer • Workplace free from discrimination and harassment