GRC Engineer I – Special Programs

About the Role

This organization specializes in managed security and compliance services, assisting firms in modernizing their security programs through automation and specialized advice. By functioning as a virtual CISO and offering services such as vendor risk management and comprehensive penetration testing, the entity simplifies intricate security procedures. They maintain expertise in frameworks like GDPR, SOC 2, ISO 27001, and HIPAA, allowing clients to prioritize growth while achieving strong security and compliance standards. The GRC Engineer I position for Special Programs is a remote role located in the Philippines that requires availability during U.S. Eastern Time working hours. You will be responsible for overseeing a group of analysts and managing client accounts, playing a vital role in helping clients reach their compliance goals. The setting is ideal for professionals who excel in rapid startup environments and can manage changing priorities while providing superior, full-cycle security solutions.

Requirements

• You must have practical experience implementing NIST CSF, SOC 2, or ISO 27001 frameworks in technology-centric cybersecurity settings.
• You need strong organizational skills to handle various client projects at the same time and the capability to communicate clearly with U.S.-based clients.
• You must possess functional knowledge in developing and enforcing enterprise security policies and control standards, plus familiarity with HIPAA, GDPR, or PCI DSS regulations.
• You are required to hold a relevant certification such as Security+, CISA, or ISO 27001 Lead Implementer.
• You must demonstrate excellent English language proficiency, maintain a professional home workspace, and have a dependable, high-speed internet connection.
• You are expected to be proficient in using automated compliance tools like Vanta and must be available to work during U.S. Eastern Time business hours.

Responsibilities

• You will act as the lead contact for various client accounts, managing engagements from initiation to completion.
• You will implement full-cycle compliance programs in accordance with standards such as ISO 27001 and SOC 2, while drafting and revising corporate security policies, control evidence, and standard operating procedures.
• You will collaborate with technical departments to assess and address cybersecurity risks and control weaknesses, while monitoring compliance milestones and task completion.
• You will conduct systematic control assessments and readiness evaluations, collect required evidence, and work with operations and IT teams to develop plans for corrective action.
• You will supervise a pod of analysts, manage escalations, and update delivery playbooks and templates to ensure consistent service quality across multiple simultaneous client projects.

Benefits & Perks

• The role provides a competitive base salary accompanied by periodic merit-based performance evaluations and eligibility for bonuses.
• You will receive support for professional growth through training programs and mentorship, including reimbursement for relevant certifications and courses.
• There are substantial opportunities for professional advancement within the organization.
• The position is remote-first, offering the flexibility to work from any location while engaging with an international team.