GRC Engineer – Governance Risk and Compliance
Coterie
Posted: 10/22/2026AzureCloudSDLCSQL
Regulatory Specialist I
Flourish Research
Posted: 10/22/2026Google Cloud Platform
Manager – Quality & Regulatory Reporting
Baptist Health
Posted: 10/22/2026
Head of Clinical Quality and Regulatory
LifeStance Health
Posted: 10/22/2026
Senior Manager/Associate Director, Regulatory Operations
Erasca, Inc.
Posted: 10/22/2026Executive Director/VP, Regulatory Affairs
Erasca, Inc.
Posted: 10/22/2026
National Compliance Consultant – Employee Health & Benefits
Marsh McLennan
Posted: 10/21/2026
Fabrication Oversight Representative, Electrical Controls & Compliance Specialist
TerraPower
Posted: 10/21/2026
Regulatory Affairs Manager
Medtronic
Posted: 10/21/2026
Director, Fleet Safety and Compliance
ASPCA
Posted: 10/21/2026
Retail Compliance and QC Analyst
Origin Bank
Posted: 10/21/2026
Lead Labor Compliance Analyst
City and County of Denver
Posted: 10/21/2026Regulatory Affairs Manager
Medtronic
Posted: 10/21/2026
Senior Manager, Global Regulatory Affairs
Biogen
Posted: 10/21/2026Vault
Director, Data Risk, Compliance and Op Model Lead
Pfizer
Posted: 10/21/2026Senior/Director, Global Regulatory Strategist
Pfizer
Posted: 10/21/2026
Manager, Business Compliance, Requests for Information
CVS Health
Posted: 10/21/2026
Senior DME Compliance, Accreditation Specialist
Verse
Posted: 10/21/2026
Compliance and Operational Risk Specialist
Bank of America
Posted: 10/21/2026
Compliance Manager
American Express
Posted: 10/21/2026Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in IT audit, GRC, and information security, with a strong focus on testing technical security controls and compliance with SOC 2, SOX/ITGC, and other regulatory standards. Proficient in automating evidence collection and control testing while collaborating with technical teams and stakeholders to enhance governance and risk management processes.
Highest-signal resume keywords
IT Audit ExperienceGRC ExpertiseTechnical Security TestingSQL ProficiencyCompliance Knowledge
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Build and maintain repeatable testing and monitoring processes for security, technology, and application controls
- Define testing procedures, evidence requirements, frequency, expected results, and exception criteria
- Perform control testing and document procedures, results, and conclusions
- Identify control failures, process gaps, control drift, evidence deficiencies, and related risk
- Investigate deficiencies and work with control owners on remediation or compensating controls
- Automate evidence collection, control testing, and continuous monitoring using queries, scripts, APIs, integrations, and GRC tooling
- Retrieve and validate evidence from applications and source systems for audits, assessments, and control testing
- Support SOC 2, ITGC/SOX readiness, NYDFS, and other compliance activities, including walkthroughs and auditor follow-up
- Maintain audit-ready evidence and testing documentation and retest remediated controls
- Translate regulatory, audit, and security requirements into practical controls and testing procedures
- Support technical risk assessments, remediation planning, business continuity and disaster recovery, privacy, third-party risk, governance, and regulatory compliance initiatives
- Identify opportunities to use automation, AI, and other technologies to improve GRC processes
- Partner with business and technical teams on assessments, remediation efforts, and GRC priorities
Requirements
What you’ll need- 4+ years of relevant experience in IT audit, GRC, information security, security assurance, technology risk, or related disciplines
- Hands-on experience testing technical security and technology controls and supporting SOC 2, SOX/ITGC, ISO 27001, NYDFS, NIST, or similar audits or assessments
- Strong understanding of identity and access management, logging and monitoring, vulnerability and endpoint management, cloud security, change management, SDLC, and backup and recovery
- Ability to retrieve, interpret, and validate technical evidence, including configurations, access data, logs, vulnerability results, change records, and system-generated reports
- Working knowledge of SQL, KQL, PowerShell, or similar tools
- Ability to evaluate control design and operation, identify deficiencies and root causes, and recommend remediation or compensating controls
- Strong analytical, communication, and professional judgment skills
- Ability to work independently with technical teams, auditors, control owners, and stakeholders
- Must be authorized to work in the United States without current or future visa sponsorship
- Preferred: Azure, Entra ID, Microsoft 365, SIEM/SOAR, endpoint, vulnerability management, cloud and security tooling
- Preferred: continuous control monitoring, automated evidence collection, APIs, scripting, or integrations
- Preferred: GRC/IRM platforms such as Optro/AuditBoard
- Preferred: insurance, financial services, fintech, or regulated-industry experience
- Preferred: familiarity with NYDFS 23 NYCRR Part 500, NAIC, PCI DSS, or NIST CSF
- Preferred: CISA, CRISC, CISSP, CISM, Security+, or similar certification
Benefits
Comp & perks- 100% remote
- Health insurance through Aetna (100% of premiums paid)
- Dental and vision insurance through Guardian (100% of premiums paid)
- Basic life insurance (100% of premiums paid)
- Flexible spending account (FSA) or health savings account (HSA)
- 401K plan with up to 4% match and immediate vesting
- Flexible PTO policy offering up to 4 weeks in the first 12 months
- Typically up to 5 weeks of PTO per calendar year thereafter
- 12 company-paid holidays each year
- Continuing education annual stipend
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Control TestingEvidence Collection AutomationTechnical Risk AssessmentIdentity And Access ManagementVulnerability ManagementCloud SecurityChange ManagementSDLCBackup And RecoveryAnalytical Skills
Soft Skills
Communication SkillsProfessional JudgmentIndependent Work
Tools & Technologies
SQLKQLPowerShellGRC/IRM PlatformsSIEM/SOARAzureMicrosoft 365APIsScriptingIntegrations
Certifications & Qualifications
CISACRISCCISSPCISMSecurity+
Industry Keywords
SOC 2SOX/ITGCISO 27001NYDFSNISTFinancial ServicesFintechRegulated IndustryPCI DSSNAIC