> Markdown version of [/jobs/ext/1315447-grc-engineer](https://www.wearedevelopers.com/jobs/ext/1315447-grc-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # GRC Engineer - **Company:** ZBD LLC - **Location:** United States (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Backup Devices, Cloud Computing, Cloud Computing Security, Computer Networks, Continuous Integration, Linux, Identity and Access Management, PCI Data Security Standards, Software Security, Gitlab, Git, Bitcoin, Terraform - **Published:** July 17, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=18502c6a3ac7980d ## About the Role You should be comfortable working in a growth-stage startup, with comfort navigating ambiguity and fast-paced environments. Come build, secure, and automate with the ZBD team!, * 3+ years of experience in security governance, cloud and application security assessments, risk management, and/or third party risk. * Thorough understanding of cybersecurity principles, cloud security, and identity and access management. * Firm grasp on cloud computing principles. * Demonstrated experience with Infrastructure as Code using Terraform/OpenTofu. * Working knowledge of Linux. * Experience with metrics gathering, alerting, reporting. * Experience with git, GitLab, and CI/CD pipelines. * Ability to design, implement, and improve cybersecurity solutions. * Ability to balance cybersecurity initiatives with business initiatives. * Ability to identify and analyze potential methods of attack., * Experience with AWS Organizations and Multi Accounts. * Experience as a software engineer. * Experience with SOC 2 compliance efforts. * Knowledge of, and experience working with Bitcoin and Lightning Network software. ## Description ZBD is seeking a GRC Engineer to design, implement, and maintain our organization's security compliance framework and risk management programs. This role bridges technical security implementation with regulatory compliance and risk assessment. This role is for someone with a solid foundation in cybersecurity risk and compliance who has a technical background. Routine compliance activities and workflows will be established and automated to support business goals., * Conduct cybersecurity risk assessments, including third-party/vendor risk evaluations, with an emphasis on consistency, repeatability, and scalability. * Proactively identify and address security & policy gaps in existing systems and architectures, recommending and implementing enhancements to strengthen ZBD's overall security posture. * Bring and keep ZBD systems, processes, and procedures into compliance with relevant compliance frameworks (SOC 2, DORA, GDPR, PCI DSS, etc.). * Design, implement, and maintain security solutions to address vulnerabilities and risks within ZBD systems. * Work closely with the software engineers and developers to establish and keep a strong security compliance posture. * Develop and enforce technical security standards, patterns, and best practices to establish and maintain a consistent and robust security posture across ZBD systems. * Contribute to the development and maintenance of security documentation, including policies, procedures, and technical guides. * Develop and maintain cloud recovery and backup solutions to ensure availability and business continuity. * Apply the most appropriate technical approach based on problem complexity and process maturity. * Participate in an On-Call rotation. * Document processes & procedures. ## Related Videos - [WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More](https://www.wearedevelopers.com/videos/1805-wearedevelopers-live-modern-devops-for-iot-devices-and-more) - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Real-World Security for Busy Developers](https://www.wearedevelopers.com/videos/1545-real-world-security-for-busy-developers) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)