> Markdown version of [/jobs/ext/4197755-senior-grc-engineer](https://www.wearedevelopers.com/jobs/ext/4197755-senior-grc-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior GRC Engineer

- **Company:** Jd Power
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Salary:** $120,000.0 - $145,000.0
- **Contract:** Permanent contract
- **Skills:** PCI Data Security Standards, Software Vulnerability Management, Tisax, IT General Controls (ITGC), RSA Archer Platform, Servicenow, Plan of Action and Milestones
- **Published:** October 31, 2026
- **Apply:** https://diversityjobs.com/career/18792210/Senior-Grc-Engineer-California

## About the Role

* 7+ years in GRC, audit, or compliance engineering roles with demonstrated success managing parallel engagements
 * Deep hands-on experience with SOC 2, ISO 27001, and enterprise audit processes
 * Proficiency with GRC platforms (ServiceNow, Archer, AuditBoard, or equivalent)
 * Strong technical understanding of IT controls, security frameworks, and risk methodologies
 * Excellent communication skills for audit coordination, exception tracking, and board-level reporting
 * Experience developing metrics and dashboards that communicate risk posture to executive leadership

Preferred Qualifications:

 * CISSP, CISM, or CRISC certification
 * Experience with DORA, PCI DSS 4.0, or EU regulatory frameworks
 * Background in B2B SaaS compliance and customer audit programs
 * Experience managing multiple concurrent audit frameworks and regulatory examinations, Candidates must be legally authorized to work in the country where employment is offered. JD Power does not provide employment sponsorship for this position.

## Description

Senior GRC Engineer to lead governance, risk, and compliance initiatives across enterprise frameworks. This role is critical as the organization faces active audit cycles for SOC 2, TISAX, and DORA compliance, with findings visible to customers and the board. You will drive audit remediation with fixed deadlines, maintain control frameworks, and ensure stakeholder confidence through transparent governance and metrics.

You will reduce the audit remediation backlog from months to weeks, establish sustainable compliance processes, and become the trusted advisor to both internal leadership and external auditors. Success means audit findings visible to customers are resolved on schedule, governance metrics are accurate and trusted, and the organization transitions from reactive compliance to proactive risk management.

In this role, you will:

 * Lead SOC 2, TISAX, and DORA audit remediation efforts with fixed deadlines and stakeholder visibility
 * Manage enterprise risk assessment and risk treatment processes, including risk register maintenance and acceptance reviews
 * Direct audit evidence collection, control documentation, finding resolution, and audit coordination across all frameworks
 * Develop and maintain governance metrics, KRIs, and reporting dashboards visible to customers and board
 * Build and evolve the organization's control frameworks aligned with customer and regulatory requirements
 * Manage Plan of Action and Milestones (POAM) tracking and vulnerability remediation governance
 * Coordinate with business units, executives, and audit partners on compliance obligations and risk reporting