Security Engineer, GRC

1Password

. Build and scale GRC programs supporting commercial audits, federal compliance, security risk management, vendor risk, policy management, and customer trust .

Posted 11/10/2026full-timeRemote • United States, CanadaMid-LevelSenior💰 $123,000 - $172,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing GRC programs, compliance frameworks, and security risk management while leveraging AI-assisted workflows to enhance operational efficiency. Proficient in translating regulatory requirements into actionable control activities and maintaining compliance across various standards.

Highest-signal resume keywords

GRC Program ManagementCompliance Frameworks (SOC 2, ISO 27001, NIST 800-53, CMMC, FedRAMP)Experience with GRC Platforms (Drata, Tines, Vanta, ServiceNow, Archer)AI-Assisted Workflow ConfigurationFederal Compliance Support

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Risk ManagementCompliance ManagementAudit ManagementProgram ManagementEvidence GenerationControl Activities TranslationContinuous MonitoringRemediation PlanningRisk AssessmentPolicy Management

Soft Skills

CollaborationCommunicationProblem-SolvingKnowledge SharingStakeholder Engagement

Tools & Technologies

APIsScriptsWebhooksTicketing WorkflowsCloud IntegrationsIdentity Integrations

Industry Keywords

GRCFederal ComplianceRisk ManagementSecurity ComplianceVendor RiskCustomer TrustAssessment PreparationControl Health Monitoring3PAO CoordinationPOA&Ms

Tech Stack

Tools & technologies

CloudServiceNow

About the role

Key responsibilities & impact

Build and scale GRC programs supporting commercial audits, federal compliance, security risk management, vendor risk, policy management, and customer trust
Manage GRC initiatives spanning commercial compliance, federal compliance, security risk, vendor risk, policy management, and customer trust
Support planning, assessment preparation, remediation, and continuous monitoring for FedRAMP, CMMC, NIST 800-53, and related programs
Partner with control owners, Security, Engineering, Legal, Privacy, auditors, assessors, and business stakeholders
Gather evidence, track actions, and resolve compliance and security gaps
Define and improve evidence generation, validation, requirement mapping, storage, and source traceability
Monitor control health, evidence freshness, configuration drift, exceptions, and remediation progress
Build or configure automated and AI-assisted workflows to reduce manual effort and improve compliance and risk process reliability
Maintain project plans, action trackers, risk logs, documentation, and status updates
Contribute to repeatable team practices and knowledge sharing
Identify opportunities to improve GRC workflows with AI and turn useful experiments into practical, reliable solutions

Requirements

What you’ll need

Three or more years of experience in security, compliance, risk, audit, GRC, program management, or a related technical discipline
Experience managing moderately complex, cross-functional compliance or security initiatives
Experience applying security or compliance frameworks such as SOC 2, ISO 27001, NIST 800-53, CMMC, FedRAMP, PCI DSS, or similar standards
Experience supporting FedRAMP or comparable federal compliance programs
Familiarity with authorization boundaries, assessment preparation, POA&Ms, continuous monitoring, 3PAO coordination, or remediation
Ability to translate framework requirements into control activities, policies, procedures, test cases, evidence requirements, and operational workflows
Experience with GRC platforms such as Drata, Tines, Vanta, ServiceNow, Archer, LogicGate, Secureframe, or comparable tools
Experience using APIs, scripts, webhooks, ticketing workflows, and cloud or identity integrations
Active use of AI in day-to-day work and experience experimenting with or configuring AI-assisted workflows for GRC, security, risk, or compliance tasks
Understanding of AI validation, human judgment, reliable controls, and appropriate review of AI-generated outputs
Must already be legally authorized to work in the United States or Canada; 1Password does not offer work authorization, relocation assistance, or visa sponsorship/transfer
Successful applicants must complete a background check

Benefits

Comp & perks

Health benefits
Dental benefits
401(k) / retirement matching program
RRSP for Canada-based roles
Generous paid time off (PTO)
Equity grant / RSU program for most employees
Incentive programs where applicable
Maternity and parental leave top-up programs
Free 1Password account
Paid volunteer days
Peer-to-peer recognition through Bonusly
Remote-first work environment
Travel for in-person engagement, including offsites, team meetings, and customer/industry events
Accommodation available upon request during recruitment