HHiring Reality
← A-LIGN External

Senior GRC Engineer

A-LIGN External
Location
United States - Remote
Posted
12 days ago
Department
Legal and Compliance
What they actually want (must-haves)
  • Bachelor's degree in information systems, cybersecurity, business, or equivalent combination of education and experience
  • 5+ years of experience in information security, GRC, IT audit, or compliance engineering roles
  • Hands-on experience with audit evidence collection and technical control validation for at least two of the following: FedRAMP, ISO 27001, ISO 42001, SOC 2, NIST 800-53, NIST 800-171
  • DevSecOps or cloud engineering experience sufficient to independently locate and extract evidence from GCP, GitHub, and Microsoft 365/Entra ID environments
  • Experience with GRC platforms and evidence automation
  • Experience supporting external audits and assessor interactions, including 3PAO assessments
Nice to have
  • Experience scripting or automating evidence collection (Python, PowerShell, or similar)
  • Familiarity with risk assessment methodologies, threat modeling (e.g., STRIDE), and security review processes
  • Certifications such as CISA, CISSP, CCSK/CCSP, ISO Lead Auditor/Implementer
  • Experience operating in PE-backed or high-growth environments
What the job really is

The Senior GRC Engineer at A-LIGN is responsible for managing audit evidence collection and maintaining technical controls across various compliance frameworks such as FedRAMP and ISO standards. This role involves hands-on work with tools like GCP, GitHub, and Microsoft 365, ensuring the organization remains audit-ready by collaborating with technical teams to streamline compliance processes. Additionally, the engineer will support risk assessments, threat modeling, and the implementation of AI safeguards.

Benefits
  • Healthcare, Dental, and Vision Benefits
  • Employer Paid Life Insurance and Disability Insurance
  • EAP - Employee Assistance Program
  • Pet Insurance
  • 401(k) Plan with Employer Matching
  • Competitive Bonus Structure
Things to weigh
  • No salary listed
  • The role requires extensive hands-on technical experience and cross-functional collaboration, which may be challenging for candidates without strong technical backgrounds.
  • The position involves managing multiple concurrent audit cycles, which could be demanding in terms of time and organization.
Job score3.8/5
Benefits5/5
Freshness5/5
Career value4/5
Role clarity5/5
Pay transparency0/5

Applying to A-LIGN External?

See how your résumé matches this role — and tailor it from what actually gets interviews.