Security GRC Lead, Governance Engineering

. Serve as a technical liaison between Assurance, Engineering, Product Security, PCLs, Legal, and other stakeholders .

Posted 10/15/2026full-timeUnited StatesSenior💰 $148,500 - $223,900 per yearWebsite

Tools & technologies

Cloud

Key responsibilities & impact

Serve as a technical liaison between Assurance, Engineering, Product Security, PCLs, Legal, and other stakeholders
Evaluate how security and compliance controls are implemented in applications, platforms, infrastructure, cloud environments, and engineering workflows
Assess control effectiveness, operational friction, unclear requirements, and scalability
Translate regulatory, compliance, and security expectations into actionable technical requirements
Develop second-line oversight protocols to independently monitor, audit, and validate operational security controls
Develop deep understanding of platforms, architectures, engineering processes, security capabilities, and control implementations
Assess control and risk exposure during M&As and design executable activation plans tied to risk models
Collaborate on emerging security requirements and future security controls
Monitor regulatory and compliance developments, including AI governance and the EU AI Act
Build change management, training, and communication programs
Establish formal control incident management with postmortems, root-cause analysis, and control error budgets
Evolve controls with control owners and technical teams
Build a network of security and control champions across Engineering
Report control reliability, coverage, pressure, and systemic risk trends to executive leadership
Represent Assurance in architecture, engineering, security, and governance discussions

What you’ll need

U.S. Citizenship or Permanent Residency required
Unable to provide visa sponsorship
Strong technical background in security engineering, cloud security, product security, IAM, platform engineering, or security architecture
Ability to understand complex systems, architectures, APIs, infrastructure, cloud environments, and software development processes
Experience translating security, risk, regulatory, or compliance requirements into technical implementation requirements
Strong understanding of security controls and frameworks such as NIST, ISO 27001, SOC, SOX, FedRAMP, or similar frameworks
Familiarity with AI security, AI governance, privacy, and evolving global technology regulations
Ability to work effectively with Engineering, Legal, Compliance, Security, Risk, and business stakeholders
Strong communication skills
Ability to challenge existing requirements constructively and recommend improvements based on technical realities and risk
Experience with independent control testing, assurance or audit practices, incident or root-cause analysis, or M&A due diligence is a plus

Comp & perks