Security GRC Engineer
At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley. Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide. When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success. Security GRC Engineer at BairesDev As a Security GRC Engineer, you will be responsible for the development and maintenance of the organization's governance, risk, and compliance posture. You will act as a key liaison between technical teams and regulatory requirements, ensuring that our systems and processes align with global security standards and industry best practices.
What You'll Do
• Design, implement, and maintain enterprise security policies and procedures aligned with frameworks like SOC2 and ISO 27001.
• Conduct comprehensive risk assessments to identify, evaluate, and mitigate potential security threats across the infrastructure.
• Coordinate and facilitate internal and external audits, serving as the primary point of contact for compliance evidence collection.
• Map security controls to various regulatory requirements to ensure continuous compliance and operational transparency.
• Collaborate with cross-functional teams to integrate compliance requirements into the software development and deployment lifecycle.
• Develop and monitor key performance indicators (KPIs) to measure the effectiveness of the security governance program. What We Are Looking For
• 4+ years of experience in Security GRC, Compliance, or Information Security.
• Proven expertise in implementing and managing compliance frameworks such as SOC2, ISO 27001, HIPAA, and PCI.
• Proficiency in conducting risk assessments and control mapping across enterprise environments.
• Hands-on experience in policy writing and supporting internal and external audit processes.
• Strong background in governance and risk management within a technology-focused organization.
• Advanced proficiency in English. How we do make your work (and your life) easier:
• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and national holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities. Join a global team where your unique talents can truly thrive and make a significant impact Apply now
What You'll Do
• Design, implement, and maintain enterprise security policies and procedures aligned with frameworks like SOC2 and ISO 27001.
• Conduct comprehensive risk assessments to identify, evaluate, and mitigate potential security threats across the infrastructure.
• Coordinate and facilitate internal and external audits, serving as the primary point of contact for compliance evidence collection.
• Map security controls to various regulatory requirements to ensure continuous compliance and operational transparency.
• Collaborate with cross-functional teams to integrate compliance requirements into the software development and deployment lifecycle.
• Develop and monitor key performance indicators (KPIs) to measure the effectiveness of the security governance program. What We Are Looking For
• 4+ years of experience in Security GRC, Compliance, or Information Security.
• Proven expertise in implementing and managing compliance frameworks such as SOC2, ISO 27001, HIPAA, and PCI.
• Proficiency in conducting risk assessments and control mapping across enterprise environments.
• Hands-on experience in policy writing and supporting internal and external audit processes.
• Strong background in governance and risk management within a technology-focused organization.
• Advanced proficiency in English. How we do make your work (and your life) easier:
• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and national holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities. Join a global team where your unique talents can truly thrive and make a significant impact Apply now