Senior Security GRC Engineer
Mozilla, Remote Canada +1
What you need
- Experience in cybersecurity, GRC, IT audit, or a related field (typically 2-4 years)
- Working knowledge of security and compliance frameworks such as SOC 2, ISO 27001, or NIST
- Familiarity with risk assessment concepts and the risk management lifecycle
- Strong organization and follow-through, with the ability to juggle many workstreams and deadlines at once
- Clear written and verbal communication, and comfort working with technical and non-technical stakeholders
- A collaborative, curious mindset and a genuine desire to learn and take on new challenges
- Hands-on experience with a GRC platform (e.g., Vanta, Drata, OneTrust, ServiceNow GRC, or similar)
- Experience supporting an audit (SOC 2, ISO 27001, or similar)
- Exposure to any of: vulnerability management, third-party risk, BC/DR, secure development practices, or penetration test coordination
- Scripting or automation skills (e.g., Python, SQL, or workflow tools) to improve GRC processes
- A relevant certification or one in progress (e.g., Security+, CISA, CISM, CISSP)