Senior Security Engineer – GRC Engineering

Job not on LinkedIn

🕒 October 6

🇮🇳 India – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

Where this job comes from

Posted on One Identity's careers page ↗One Identity's careers page, not through a job board

First seen by Remote Rocketship October 6

Still open on One Identity's site. Checked 4 hours ago.

Apply Now
Logo of One Identity

One Identity

501 - 1000 employees

🔒 Cybersecurity

☁️ SaaS

🏢 Enterprise

💰 $3M Venture Round on 2004-07

Cybersecurity • SaaS • Enterprise

One Identity is a company that specializes in identity and access management solutions, focusing on protecting digital identities and simplifying user access across organizations. They offer a comprehensive suite of products designed to secure privileged access, govern user identities, and streamline compliance with regulations through automation. Their platform integrates AI-driven insights to enhance security and operational efficiency, supporting both on-premises and cloud environments.

📋 Description

• Own continuous control monitoring end to end across identity providers, cloud control planes, code repositories, endpoint management, and ticketing • Build alerting, escalation, and remediation confirmation for degraded controls • Build a centralized common controls framework based on ISO 27001 and SOC 2 • Map additional frameworks to the common controls framework • Capture, timestamp, index, and assemble audit-ready evidence on demand • Ensure the evidence system operates within and logs its own controls • Write control validation as code and produce auditor-accepted, engineer-actionable outputs • Create pull-request-based corrections against pipelines, policies, or configurations • Partner with infrastructure engineering on policy as code and evidence emission • Define appropriate uses of agentic workflows for control mapping, evidence classification, and validation • Own the compliance engineering program's direction, framework priorities, automation priorities, and engineering allocation • Advance metrics covering control health, framework coverage, remediation velocity, and trends • Integrate cyber risk management, risk registers, and exception handling with control telemetry • Own automated asset prioritization to inform risk decisions, control coverage, and remediation order • Lead the technical side of audits and explain control implementation and evidence production to assessors

🎯 Requirements

• Six or more years across compliance program leadership and security or compliance engineering, including experience on both the framework side and the build side; equivalent depth counts • Experience leading a major framework through assessment from readiness through certification or authorization, such as FedRAMP or comparable, or owning GRC engineering end to end with control telemetry, continuous monitoring, and evidence automation • Strategic framework design and control mapping across frameworks • Recent hands-on Python and API integration experience • Hands-on building with AI in the loop within the last six months, including verification of tooling output • Framework fluency across ISO 27001 and SOC 2 • Familiarity with FedRAMP 20x, NIS2, DORA, and PCI DSS • Knowledge of policy-as-code frameworks and cloud enforcement • Sufficient Azure and AWS experience to identify where evidence resides • Experience with a compliance automation platform • Ability to run an audit calendar and assessor relationship • Ability to write for both auditors and engineers • Helpful: assessor-side experience; IRAP or another non-US regime; evidence work across hosted services and customer-deployed software; prior software or platform engineering experience

🏖️ Benefits

• Health and wellness programs • Career development opportunities • Programs supporting employees in pursuing fulfilling careers • Opportunities to learn and grow • Equal employment opportunity and harassment-free work environment

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🕒 October 1

Bio-Rad Laboratories

5001 - 10000

🏥 Healthcare

🏭 Manufacturing

🧬 Biotechnology

Information security specialist protecting Bio-Rad’s life-science data and cloud infrastructure. Owning DLP, cloud security, and high-severity incident response outside US hours.

🕒 September 29

AHEAD

1001 - 5000

💼 Consulting

🤖 Artificial Intelligence

🏢 Enterprise

Senior Security GRC Consultant advising digital-business enterprises on cyber risk, control frameworks, and compliance. Designing GRC programs, quantifying risk, and leading client engagements.

🇮🇳 India – Remote

💰 $5.7M Venture Round - AHEAD on 2024-05

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🕒 September 18

Jabil

10,000+ employees

🚘 Automotive

🎖️ Defense

🏥 Healthcare

Security Group Leader leading plant security, investigations, and loss prevention for Jabil’s global manufacturing and supply-chain solutions. Implementing site controls and security improvements in Ranjangaon, India.

🕒 September 9

HighLevel

201 - 500

💼 Consulting

📦 Logistics

☁️ SaaS

Lead Security Engineer securing HighLevel’s AI-powered sales and marketing platform. Leading application security, DevSecOps, and adversarial testing of LLMs, AI agents, and RAG systems.

🇮🇳 India – Remote

💰 Series A on 2021-11

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🕒 September 9

Edwards Lifesciences

10,000+ employees

🏥 Healthcare

💼 Consulting

🍽️ Food & Beverage

HRIS Manager optimizing Workday reporting, security, integrations, and payroll at Edwards Lifesciences. Designing scalable HR technology solutions supporting global teams and patient care.

Developed by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok