About our client:

Our client is a Security & Compliance Service Growth firm that specializes in transforming security and compliance from a perceived obstacle into a strategic growth enabler. Whether you're pursuing SOC 2, ISO 27001, CMMC, NIST CSF, or another framework, they don't just advise. They execute with precision.

Our values

The GRC Engineer is a strategic, high-impact position for someone who can serve as a dependable leader.

This role is built for a proactive professional who independently drives complex compliance initiatives and stays ahead of emerging regulatory trends. You will work across a diverse client base, building rapport with stakeholders to ensure consistent progress on control implementation and audit readiness.

The ideal candidate brings a high degree of technical autonomy and a specialized GRC background with both implementer and auditor experience.

Core Requirements

Hands-on implementer and auditor experience: Professional auditing experience, plus experience building a security program on the implementation side.
Framework expertise: Expert, hands-on experience leading Cybersecurity Maturity Model Certification (CMMC) Level 2 projects and standing up ISO 27001 Information Security Management Systems (ISMS) from scratch.
Microsoft GCC High: Direct experience managing and operating within Microsoft GCC High environments to maintain strict compliance standards.
Security engineering aptitude: Technically proficient and comfortable navigating cloud environments, with the agility to serve as a technical backup for broader operational tasks.
Security leadership mindset: A big-picture, risk-based approach to building defensible security programs, with the ability to design and implement programs that are not just compliant, but practical too.
Proactive ownership: A self-starter committed to tracking emerging regulatory trends, executive orders, and framework updates to proactively evolve internal and client policies.

Preferred Qualifications

Incident response and security operations: Ability to facilitate and support incident response tabletop exercises, and to create and leverage playbooks for security events.

Frameworks, Platforms, and Environments

Compliance Frameworks & Standards

Platforms & Environments

SOC 2
Amazon Web Services (AWS)
ISO 27001
Microsoft Azure
CMMC
Microsoft GCC High
NIST 800-171
GRC automation platforms

What They Offer

Health and dental insurance
401(k) plan and Match
Paid time off