Senior Security GRC Engineer

Responsibilities

• Risk Management
• Perform risk assessments and process incoming risk questions and intake requests
• Maintain the risk register, keeping entries accurate, current, and well documented
• Track risk treatment plans and follow up with owners on progress
• Manage the exceptions and issues tracking process, including intake, documentation, expiration follow-up, and reporting
• Support third-party risk activities, such as vendor assessments, questionnaire review, and tracking remediation
• Compliance and Audit
• Coordinate evidence collection from control owners and chase outstanding requests
• Help prepare control owners and stakeholders for audit interviews
• Keep the SOC 2 system description, ISMS documentation, and Statement of Applicability (SoA) up to date

Languages