Security GRC Lead, Governance Engineering

What you'll do

• Serve as a technical liaison between Assurance, Engineering, Product Security, and Legal teams.
• Evaluate how security and compliance controls are designed, implemented, and scaled across cloud environments.
• Translate regulatory and security expectations into actionable technical requirements for Engineering teams.
• Develop second-line oversight protocols to independently monitor and audit security control operations.
• Assess control and risk exposure during mergers and acquisitions to deliver executable activation plans.
• Establish a formal incident management practice for control failures, including root-cause analysis and postmortems.
• Monitor global compliance frameworks and AI governance to identify organizational implications.
• Report on control reliability, coverage, and systemic risk trends to executive leadership.

What we're looking for

• U.S. Citizenship or Permanent Residency is required.
• Strong technical background in security engineering, cloud security, product security, IAM, platform engineering, or security architecture.
• Ability to understand complex systems, architectures, APIs, infrastructure, cloud environments, and software development processes.
• Experience translating security, risk, regulatory, or compliance requirements into technical implementation requirements.
• Strong understanding of security controls and frameworks such as NIST, ISO 27001, SOC, SOX, FedRAMP, or similar.
• Familiarity with emerging technology and regulatory areas such as AI security, AI governance, and privacy.
• Strong communication skills to explain technical details to governance teams and translate governance expectations for Engineering.
• Experience with independent control testing, assurance or audit practices, incident or root-cause analysis, or M&A due diligence (preferred).