HHiring Reality
← A-LIGN External

Senior GRC Engineer

A-LIGN External
Location
Panama City, Panama - In-Office Hybrid
Posted
12 days ago
Department
Legal and Compliance
What they actually want (must-haves)
  • Bachelor's degree in information systems, cybersecurity, business, or equivalent combination of education and experience
  • 5+ years of experience in information security, GRC, IT audit, or compliance engineering roles
  • Hands-on experience with audit evidence collection and technical control validation for at least two of the following: FedRAMP, ISO 27001, ISO 42001, SOC 2, NIST 800-53, NIST 800-171
  • DevSecOps or cloud engineering experience sufficient to independently locate and extract evidence from GCP, GitHub, and Microsoft 365/Entra ID environments
  • Experience with GRC platforms and evidence automation (AuditBoard, Vanta, Drata, or similar)
  • Experience supporting external audits and assessor interactions, including 3PAO assessments
Nice to have
  • Experience scripting or automating evidence collection (Python, PowerShell, or similar)
  • Familiarity with risk assessment methodologies, threat modeling (e.g., STRIDE), and security review processes
  • CISA, CISSP, CCSK/CCSP, ISO Lead Auditor/Implementer, or relevant certifications preferred but not required
  • Proven experience utilizing AI tools to automate manual tasks, streamline workflows, and increase team efficiency
  • Experience operating in PE-backed or high-growth environments preferred
What the job really is

The Senior GRC Engineer at A-LIGN is responsible for managing audit evidence collection and maintaining technical controls across various compliance frameworks such as FedRAMP and ISO standards. This role involves hands-on work with GCP, GitHub, and Microsoft 365, collaborating with technical teams to ensure continuous audit readiness and support broader information security activities including risk assessments and security reviews. The position requires a proactive approach to monitoring compliance and implementing AI technical safeguards.

Benefits
  • Employer Paid Life & Health Insurance
  • Competitive Bonus Structure
  • Home Office Reimbursement
  • Technology Allowance
  • Certification Reimbursement
  • BeneficiaT Discount Loyalty Program
Things to weigh
  • No salary listed
  • The role requires strong collaboration across multiple technical departments, which may involve navigating complex team dynamics.
  • The position is in-office hybrid, which may not suit all candidates' preferences.
Job score3.8/5
Benefits5/5
Freshness5/5
Career value4/5
Role clarity5/5
Pay transparency0/5

Applying to A-LIGN External?

See how your résumé matches this role — and tailor it from what actually gets interviews.

Calculate resume scoreGenerate resume to apply
Job Link →