Senior GRC Engineer

Genesys•Toronto, ON

28d

About The Position

Genesys empowers organizations of all sizes to improve loyalty and business outcomes by creating the best experiences for their customers and employees. Through Genesys Cloud, the AI-powered Experience Orchestration platform, organizations can accelerate growth by delivering empathetic, personalized experiences at scale to drive customer loyalty, workforce engagement, efficiency and operational improvements. We employ more than 6,000 people across the globe who embrace empathy and cultivate collaboration to succeed. And, while we offer great benefits and perks like larger tech companies, our employees have the independence to make a larger impact on the company and take ownership of their work. Join the team and create the future of customer experience together. Role Overview: Protecting customer, employee, and enterprise data at scale sits at the core of Genesys Cloud, where secure, resilient experiences power how organizations engage with millions of users globally. This role drives the integrity and evolution of the Product Security GRC program, ensuring that modern cloud architectures, AI-driven services, and microservices environments operate with strong, validated security controls. At Genesys, we are advancing customer experience through empathy and innovation, and this position directly shapes how trust is built into every interaction. You will own end-to-end security assurance across cloud platforms, applications, and third-party ecosystems, influencing architecture decisions and enabling engineering teams to deliver secure, compliant solutions. Working across Product Security, Engineering, and Audit teams, you will translate complex regulatory and framework requirements into scalable technical controls that align with real-world system design. This role offers exposure to enterprise-scale SaaS environments, evolving regulatory landscapes, and emerging technologies, positioning you to influence both platform direction and long-term security strategy.

Requirements

5+ years of experience in GRC, cloud security, security engineering, or architecture review within complex technology environments
Current valid Reliability Status required for handling Protected A and Protected B information under Canadian standards
Strong expertise in cloud platforms, particularly AWS, and their native security services and controls
Demonstrated experience reviewing architecture diagrams, data flows, and engineering design patterns in SaaS environments
Deep familiarity with security frameworks including ISO 27001, SOC 2, PCI DSS, and NIST CSF
Proven ability to conduct technical risk assessments and translate findings into actionable remediation strategies
Solid understanding of CI/CD pipelines, identity and access management, network security, and monitoring systems
Strong communication skills with the ability to convey complex technical risks to both technical and business stakeholders

Nice To Haves

Enhanced Reliability Status or eligibility to obtain it
Experience with scripting or programming using Python or PowerShell
Exposure to AI and machine learning architectures and governance considerations
Experience with API integrations and orchestration in distributed systems
Relevant certifications such as CISSP, CISM, CRISC, CCSP, or AWS Security Specialty
Familiarity with threat modeling methodologies and secure design practices
Experience with security-as-code or policy-as-code approaches
Background in high-scale SaaS or regulated environments
Demonstrated ability to mentor or support junior team members

Responsibilities

Lead comprehensive security assessments across applications, cloud services, and third-party integrations to identify and mitigate risk at scale
Evaluate and validate security controls against frameworks such as ISO 27001, SOC 2, PCI DSS, and NIST CSF to ensure continuous compliance and operational effectiveness
Review cloud and application architectures to identify design risks, misconfigurations, and control gaps, driving secure-by-design principles
Influence engineering decisions by providing actionable security guidance aligned with zero trust, least privilege, and secure SDLC practices
Partner with internal and external auditors to demonstrate control effectiveness through technical walkthroughs, evidence presentation, and audit support
Translate regulatory and compliance requirements into technical specifications that can be consistently implemented across distributed systems
Drive remediation efforts by collaborating with cross-functional stakeholders to resolve identified risks and strengthen security posture
Enable security at scale by improving GRC processes, tooling, and automation across the Genesys Cloud platform

Benefits

We invest in your well-being, because when you’re at your best, so are the experiences you create.
Comprehensive extended group health coverage
Generous paid time off, including vacation and personal leave
Retirement savings program with employer RRSP matching up to a prescribed maximum amount
Family-friendly benefits, including parental leave top-up and adoption assistance
Growth and development opportunities through access to learning resources and internal mobility programs
Exact details of these programs, including the conditions for eligibility, the amount of the benefit (including caps on benefits and customary pricing details), the length of the paid time off, etc. will be provided upon hire and is subject to Genesys policies.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume