> Markdown version of [/jobs/ext/4677132-senior-grc-engineer-emea](https://www.wearedevelopers.com/jobs/ext/4677132-senior-grc-engineer-emea). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior GRC Engineer - EMEA

- **Company:** Cisco
- **Location:** Brussel, Belgium
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Continuous Integration, Reliability Engineering, Secure Coding, Information Technology Security Auditing, Software Vulnerability Management, Policy as Code, Devsecops, Cisco, Security Orchestration, Automation & Response
- **Published:** November 12, 2026
- **Apply:** https://dejobs.org/x/x/F8A7F673311F4732A4BC76006E879DC3/job/

## About the Role

* Bachelor's degree and 5+ years of hands-on experience implementing security and compliance automation, hardening, vulnerability remediation, secure delivery improvements, or related DevSecOps capabilities
 * 3+ years' experience conducting security reviews, architecture reviews, threat or risk assessments, and translating findings into practical guidance and remediation plans (e.g. to comply with SOC2, ISO or other certification frameworks)
 * Experience working with corporate security mandates, secure development lifecycle requirements, product security standards, compliance requirements, or security audit processes
 * Experience with security frameworks and compliance audits such as SOC 2, ISO 27001, or similar frameworks, privacy regulations and data protection requirements such as GDPR or similar standards, * Build and maintain Compliance-as-Code capabilities - policy-as-code, automated control validation, continuous evidence collection, and monitoring integrated into CI/CD - so audit and supervisory readiness scales with the business rather than depending on manual, point-in-time checks.
 * Relevant security certifications such as CISSP, CISM, CCSP, or similar
 * Experience with different certification frameworks (e.g. FedRAMP; CRA is a bonus).
 * Experience with Cisco security mandates, policies, tooling, or product security processes
 * Strong written and verbal communication skills to facilitate the explanation of security risk, requirements, priorities, and tradeoffs to both technical and non-technical team members

## Description

We are looking for an expert Security Officer / GRC (Governance, Risk, and Compliance) Engineer to provide senior security guidance and hands-on engineering contributions within the Hypershield solution. This role partners closely with Engineering, Architecture, Product Management, SRE, Compliance, Cisco's Security and Trust Organization (STO), and leadership teams to help Isovalent meet security, privacy, corporate and regulatory requirements while enabling rapid and secure product delivery.

In this role, you will be a senior security partner for Hypershield. You will assess security impact, clarify requirements, prioritize risk, guide remediation, and contribute to security automation, hardening, and remediation work. Typical responsibilities include:

 * Assess and guide improvements to the security posture of Hypershield components and delivery workflows
 * Interpret Cisco-level security mandates, policies, audit requirements, release gates, and security best practices into clear guidance, control expectations, acceptance criteria, and remediation priorities
 * Partner with development teams, architects, product management, SRE, compliance, and central security and data privacy teams to review new features, architecture changes and security-sensitive designs, identifying gaps, recommending mitigations, and helping teams balance security, usability, and delivery needs
 * Support compliance with Cisco security mandates and Build Environment Security requirements by clarifying requirements, identifying evidence needs, reviewing audit findings, and guiding remediation priorities
 * Define and contribute to implementation of security and compliance automation, reporting, and tooling that improve visibility, reduce manual work, and help teams follow security requirements consistently