Senior Security GRC Engineer

Role overview Help develop and operate governance, risk, and compliance practices across enterprise and product security. The work spans risk tracking, audit readiness, third-party reviews, and security program support, offering broad exposure to GRC operations and collaboration with technical and non-technical teams.

Responsibilities - Assess and record security risks, maintain the risk register, and follow up on treatment plans, exceptions, and issues. - Support vendor risk reviews by assessing questionnaires and tracking remediation actions. - Coordinate audit evidence collection, prepare stakeholders for interviews, and keep security management documentation current. - Track audit findings and work with control owners to complete remediation. - Support secure development, data governance, business continuity, vulnerability management, and penetration testing activities through documentation, coordination, and follow-up. - Administer GRC tools and reporting, maintain policies and standards, and identify opportunities to streamline recurring work.

Requirements - Typically two to four years of experience in cybersecurity, GRC, IT audit, or a related area. - Working knowledge of frameworks such as SOC 2, ISO 27001, or NIST. - Familiarity with risk assessment and the risk management lifecycle. - Strong organization and follow-through across concurrent projects and deadlines. - Clear written and spoken communication, with comfort working across technical and non-technical groups. - Curiosity, collaboration, and willingness to support a broad range of security work.

Benefits and work setup - Remote role based in Germany, with a listed annual hiring range of €68,000–€91,000. - Benefits include medical, dental, and vision coverage; retirement contributions; wellness days and stipends; paid parental leave; a home office stipend; and professional development support. Some benefits vary by country.