GRC Engineer - Specialist

About the role

We are looking for a detail‑oriented GRC Engineer to design, implement and manage our governance, risk and compliance programs. The role ensures that our organization meets regulatory requirements and industry standards while supporting continuous security improvement.

Key responsibilities

• Develop and maintain governance frameworks, policies and procedures aligned with standards such as ISO 27001, NIST and COBIT.
• Identify, assess and manage information‑asset risks, creating mitigation strategies and monitoring their effectiveness.
• Conduct regular compliance audits and assessments, ensuring adherence to relevant laws and regulations.
• Review security designs, including data flow diagrams, architectural blueprints, networking diagrams and authentication/authorization mechanisms.
• Perform threat modeling to prioritize security risks and recommend targeted controls.
• Create, update and communicate security policies, standards and guidelines across the organization.
• Assist in incident investigation, documentation and reporting in line with regulatory requirements.
• Prepare and present governance, risk and compliance reports for management and stakeholders.

Required profile

• Bachelor’s degree in Computer Science, IT, Cybersecurity or a related field.
• At least one year of experience in governance, risk and compliance roles.
• Strong analytical, problem‑solving and communication skills.
• Ability to work independently and collaboratively, managing multiple tasks with attention to detail.

Required skills

• Knowledge of ISO 27001, NIST, PCI‑DSS and COBIT frameworks.
• Experience with risk assessment and management methodologies.
• Familiarity with GRC tools and software.
• Understanding of security design artifacts (data flow diagrams, architectural blueprints, networking diagrams).
• Threat modeling techniques.
• Policy development, incident management and compliance reporting.