TRACTIAN

Compliance

• Develop, implement, and continuously improve information security governance, risk management, compliance, and assurance processes.
• Support compliance with frameworks and standards such as ISO 27001, ISO 27002, SOC 2, and other applicable requirements.
• Conduct risk assessments, evaluate security controls, maintain risk registers, and coordinate risk treatment and remediation activities.
• Support internal and external audits, certification processes, evidence collection, and continuous compliance monitoring.
• Develop and maintain security policies, standards, procedures, and governance documentation.
• Improve Business Continuity Management (BCM), Disaster Recovery (DR), Incident Response (IR), and Third-Party Risk Management (TPRM) activities, including gap analysis, planning, exercises, and testing.
• Assess secure software development practices and collaborate with Engineering teams to integrate security and compliance requirements into the Software Development Lifecycle (SDLC).
• Conduct customer security and compliance due diligence, including security questionnaires, RFPs, and contractual security assessments.
• Identify and implement opportunities to automate GRC processes using AI, APIs, integrations, and other technologies.
• Collaborate with Engineering, Infrastructure, Security, Product, and business teams to integrate security and compliance requirements into operational and technical processes.

Explore GRC Engineer at TRACTIAN. Review requirements and application details.

Open roles

GRC Engineer