Junior Cybersecurity GRC Engineer

About the role

The Junior Cybersecurity GRC Engineer supports the Governance, Risk and Compliance (GRC) function by helping implement and maintain security policies and compliance activities. Working closely with the GRC team, the role bridges technical operations and regulatory standards to keep the organization’s cybersecurity posture robust.

Key responsibilities

• Develop, review and maintain information security policies, standards and internal procedures; communicate them across departments.
• Collect, organize and preserve compliance evidence for internal and external audits; track audit findings and coordinate remediation.
• Identify, assess and document information security risks; maintain risk registers and monitor mitigation actions.
• Support third‑party and vendor risk assessments to ensure alignment with security requirements.
• Evaluate the effectiveness of security controls, prepare reports, dashboards and executive summaries on GRC activities.
• Document GRC workflows and recommend improvements to processes, tools and methodologies.
• Assist in aligning security operations with policies, standards and regulatory requirements; maintain procedures and playbooks for logging, detection and incident response.
• Promote a positive safety culture and comply with the organization’s safety, security and environmental policies.

Required profile

• Bachelor’s degree in Information Security, Computer Science, IT or a related field.
• Strong interest in governance, risk and compliance activities.
• Ability to work collaboratively with cross‑functional teams and communicate security concepts clearly.

Required skills