Senior GRC Engineer

J.D. Power • Michigan - Remote, MI

1d • $140,000 - $165,000 • Remote

About The Position

The Senior GRC Engineer will lead governance, risk, and compliance initiatives across enterprise frameworks, including active SOC 2, TISAX, and DORA audit cycles. The role drives audit remediation against fixed deadlines, maintains control frameworks, and builds stakeholder confidence through transparent governance and metrics. The successful candidate will reduce the audit remediation backlog, establish sustainable compliance processes, and serve as a trusted advisor to internal leadership and external auditors. Success includes resolving customer-visible audit findings on schedule, maintaining accurate and trusted governance metrics, and moving the organization from reactive compliance to proactive risk management.

This is a remote, full-time position available in the USA and Canada. It reports to the Cybersecurity Governance Manager. The position is a new vacancy.

Requirements

• At least 7 years in GRC, audit, or compliance engineering roles, with demonstrated success managing parallel engagements.
• Deep hands-on experience with SOC 2, ISO 27001, and enterprise audit processes.
• Proficiency with GRC platforms such as ServiceNow, Archer, AuditBoard, or equivalent.
• Strong technical understanding of IT controls, security frameworks, and risk methodologies.
• Excellent communication skills for audit coordination, exception tracking, and board-level reporting.
• Experience developing metrics and dashboards that communicate risk posture to executive leadership.

Nice To Haves

• CISSP, CISM, or CRISC certification.
• Experience with DORA, PCI DSS 4.0, or EU regulatory frameworks.
• Background in B2B SaaS compliance and customer audit programs.
• Experience managing multiple concurrent audit frameworks and regulatory examinations.

Responsibilities

• Lead SOC 2, TISAX, and DORA audit remediation efforts with fixed deadlines and stakeholder visibility.
• Manage enterprise risk assessment and risk treatment processes, including risk register maintenance and acceptance reviews.
• Direct audit evidence collection, control documentation, finding resolution, and audit coordination across frameworks.
• Develop and maintain governance metrics, key risk indicators (KRIs), and reporting dashboards visible to customers and the board.
• Build and evolve control frameworks aligned with customer and regulatory requirements.
• Manage Plan of Action and Milestones (POAM) tracking and vulnerability remediation governance.
• Coordinate with business units, executives, and audit partners on compliance obligations and risk reporting.

Benefits

• Eligible employees may participate in medical, dental, vision, disability, and life insurance.
• Retirement savings programs.
• Paid time off.
• Wellness programs.
• Other company-sponsored benefits, which vary by country and employment status.
• Flexible work arrangements.
• Opportunities for learning and development.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed