Remote Governance, Risk, and Compliance Engineer

Jobgether•California, CA

1d•Remote

About The Position

This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Governance, Risk, and Compliance Engineer - REMOTE. In this role, you will have the opportunity to significantly influence compliance and security initiatives within a fast-paced environment. You will be responsible for partnering with various functions to design and implement compliance programs that are critical to building trust among customers. Your expertise will not only enhance the compliance framework but will also support the company's mission in transforming data usage across industries. You will lead efforts that impact both technical and business decisions, ensuring that compliance is embedded into the company’s operations. Accountabilities Partner cross-functionally to design, implement, and maintain compliance programs, including SOC 2, ISO 27001, PCI-DSS, and others. Collaborate with Engineering to review and validate compliance-related product and infrastructure changes. Execute ongoing compliance operations, including employee security onboarding, third-party risk assessments, and customer audits. Enhance access governance programs in partnership with Operations. Support privacy tooling and regulatory requirements alongside Marketing and Legal teams. Coordinate with the Security team to improve corporate security controls and processes. Contribute to continuous improvement of GRC processes and automation.

Requirements

7+ years of experience in IT Audit, Governance, Risk & Compliance, or Information Security.
Bachelor’s degree in Computer Science, Information Technology, or a related field.
Strong knowledge of security and privacy frameworks, specifically in cloud environments.
Experience with GRC and security tooling.
Excellent communication skills with an ability to collaborate across teams.
Strong problem-solving skills balanced with business needs.
Ability to thrive in a high-growth, fast-paced environment.
High level of ownership and attention to detail.

Nice To Haves

Relevant certifications such as CISA, PCI-P, or CIPP are a plus.

Responsibilities

Partner cross-functionally to design, implement, and maintain compliance programs, including SOC 2, ISO 27001, PCI-DSS, and others.
Collaborate with Engineering to review and validate compliance-related product and infrastructure changes.
Execute ongoing compliance operations, including employee security onboarding, third-party risk assessments, and customer audits.
Enhance access governance programs in partnership with Operations.
Support privacy tooling and regulatory requirements alongside Marketing and Legal teams.
Coordinate with the Security team to improve corporate security controls and processes.
Contribute to continuous improvement of GRC processes and automation.