Senior Security GRC Engineer

🕒 August 11

🇨🇦 Canada – Remote

💵 $116k - $171k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 17%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Mozilla

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 1998

👥 B2C

🔒 Cybersecurity

B2C • Cybersecurity • Software

Mozilla is a non-profit organization dedicated to promoting an open and accessible internet. They are the makers of the popular Firefox browser, which emphasizes user privacy, speed, and control. Mozilla also offers a range of products that focus on internet security and privacy, including Mozilla VPN, Firefox Relay, and Mozilla Monitor. Additionally, the organization is involved in open-source projects, AI innovation, and advocating for digital rights. Mozilla aims to empower users with trustworthy technology and policies that protect privacy, support open-source AI development, and foster accountability for tech companies.

📋 Description

• Maintain and mature Mozilla's Information Security Management System, including the Statement of Applicability, risk treatment plans, and Management Review Meeting process • Support ISO 27001 and SOC 2 Type 2 audits by determining scope, preparing evidence and narrative artifacts, participating in auditor interviews and walkthroughs, and resolving findings • Contribute to SOC 2 System Description and other audit-specific narrative documentation • Track gaps and remediation efforts from readiness assessments and audits • Lead the security policy program, including policy creation, revision, and cross-functional review cycles • Support compliance scaling for additional products or business units pursuing readiness assessments and certification • Support the internal audit function and ISO 27001 internal audit requirements • Partner with Engineering, IT, Legal, Privacy, People teams, and product leadership to gather evidence and drive control ownership • Advise the GRC manager and Security leadership on audit risk, certification readiness, and compliance strategy

🎯 Requirements

• 5 years of experience in information security, GRC, or compliance-focused roles • Deep familiarity with ISO 27001 and SOC 2 Trust Services Criteria through audits from readiness through certification • Experience across the full breadth of an ISMS, including SoA maintenance, Management Review Meetings, and System Description authorship • Experience writing and revising security policies and running cross-functional review cycles • Experience tracking gaps and remediation plans within compliance and risk programs • Ability to work with engineers, product managers, legal, and executive stakeholders • Ability to translate compliance requirements into practical, actionable workflows • Ability to ramp up quickly and operate independently • Comfort building processes where none yet exist • Strong written and verbal communication skills • Ability to represent Mozilla confidently before external auditors • Relevant certifications such as CISA, CISSP, or ISO 27001 Lead Auditor/Implementer are a plus

🏖️ Benefits

• Generous performance-based bonus plans for eligible employees • Rich medical, dental, and vision coverage • Generous retirement contributions with 100% immediate vesting • Quarterly all-company wellness days • Country-specific holidays plus a birthday day off • One-time home office stipend • Annual professional development budget • Quarterly well-being stipend • Considerable paid parental leave • Employee referral bonus program • Life/AD&D, disability, EAP, and other benefits varying by country