Job description

About our client: Our client is a Security & Compliance Service Growth firm that specializes in transforming security and compliance from a perceived obstacle into a strategic growth enabler. Whether you're pursuing SOC 2, ISO 27001, CMMC, NIST CSF, or another framework, they don't just advise. They execute with precision. Our values The GRC Engineer is a strategic, high-impact position for someone who can serve as a dependable leader. This role is built for a proactive professional who independently drives complex compliance initiatives and stays ahead of emerging regulatory trends. You will work across a diverse client base, building rapport with stakeholders to ensure consistent progress on control implementation and audit readiness. The ideal candidate brings a high degree of technical autonomy and a specialized GRC background with both implementer and auditor experience. Core Requirements • Hands-on implementer and auditor experience: Professional auditing experience, plus experience building a security program on the implementation side. • Framework expertise: Expert, hands-on experience leading Cybersecurity Maturity Model Certification (CMMC) Level 2 projects and standing up ISO 27001 Information Security Management Systems (ISMS) from scratch. • Microsoft GCC High: Direct experience managing and operating within Microsoft GCC High environments to maintain strict compliance standards. • Security engineering aptitude: Technically proficient and comfortable navigating cloud environments, with the agility to serve as a technical backup for broader operational tasks. • Security leadership mindset: A big-picture, risk-based approach to building defensible security programs, with the ability to design and implement programs that are not just compliant, but practical too. • Proactive ownership: A self-starter committed to tracking emerging regulatory trends, executive orders, and framework updates to proactively evolve internal and client policies. Preferred Qualifications • Incident response and security operations: Ability to facilitate and support incident response tabletop exercises, and to create and leverage playbooks for security events. Frameworks, Platforms, and Environments Compliance Frameworks & Standards Platforms & Environments • SOC 2 • Amazon Web Services (AWS) • ISO 27001 • Microsoft Azure • CMMC • Microsoft GCC High • NIST 800-171 • GRC automation platforms What They Offer • Health and dental insurance • 401(k) plan and Match • Paid time off

Requirements

Must-haves

Hands-on implementer and auditor experience: Professional auditing experience, plus experience building a security program on the implementation side.
Framework expertise: Expert, hands-on experience leading Cybersecurity Maturity Model Certification (CMMC) Level 2 projects and standing up ISO 27001 Information Security Management Systems (ISMS) from scratch.
Microsoft GCC High: Direct experience managing and operating within Microsoft GCC High environments to maintain strict compliance standards.
Security engineering aptitude: Technically proficient and comfortable navigating cloud environments, with the agility to serve as a technical backup for broader operational tasks.
Security leadership mindset: A big-picture, risk-based approach to building defensible security programs, with the ability to design and implement programs that are not just compliant, but practical too.
Proactive ownership: A self-starter committed to tracking emerging regulatory trends, executive orders, and framework updates to proactively evolve internal and client policies.
Amazon Web Services (AWS)
Microsoft Azure
Microsoft GCC High
GRC automation platforms
What They Offer

Nice-to-haves

Incident response and security operations: Ability to facilitate and support incident response tabletop exercises, and to create and leverage playbooks for security events.
Frameworks, Platforms, and Environments
Compliance Frameworks & Standards
Platforms & Environments

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsazure

Platform: dover
Effort: medium

Benefits

Benefits detected in the listing.

Dental

401(K)

Paid Time Off