GRC Engineer

Requisitos

• Background in IT, Information Security, GRC, Internal Audit, Compliance, or related fields
• Hands-on experience implementing or improving security governance, risk management, and compliance programs
• Experience with ISO 27001 / ISO 27002, SOC 2, or equivalent security frameworks
• Hands-on Information Security Risk Management experience: risk assessments, treatment, control evaluation, remediation
• Experience implementing/maintaining BCM and DR processes (BIA, RTO/RPO, recovery planning, testing)

Desejáveis

• Experience with GRC platforms (e.g., Vanta, Drata)
• Experience with Policy-as-Code or Compliance-as-Code
• Familiarity with cloud environments (AWS, OCI, GCP), IaC, CI/CD pipelines, and Git-based workflows
• Experience building AI-assisted workflows or using LLMs and AI agents to automate GRC activities
• Knowledge of ISO 22301, ISO 27701, ISO 42001, NIST CSF, or FedRAMP