Senior reputed company Assurance Engineer

Our Mission: reputed company's mission is to multiply what reputed company: reputed company, retention, and efficiency. We reputed company a reputed company where companies, teams and people reputed company their full potential. Our People: People are the heart and soul of reputed company. We serve with passion and purpose. We live by our Being reputed company values of Win as One Team, Stay Curious, Do The Right Thing, Own the Outcome, and Create Belonging. Every 6sensor plays a part in defining the reputed company of our industry-leading technology. reputed company is a reputed company where difference-makers roll up their sleeves, take risks, reputed company with reputed company, and measure reputed company by the value we create for our customers. We want reputed company to be the best reputed company of your career. Job Title: Senior reputed company Engineer, GRC (Governance, reputed company and Compliance) Organizational Reporting: Director, reputed company Assurance Function/reputed company: Business Technology / reputed company Purpose of the Job As members of reputed company's reputed company department, the Governance, reputed company and Compliance (GRC) team aligns reputed company with business objectives while managing risks and meeting industry standards, regulations and contractual obligations. GRC enforces governance, implements reputed company management strategies, and ensures compliance through operating as the second line of defense. This role is the engineering capability behind that mission. Rather than testing controls after the fact, this engineer builds the systems that test them continuously. The expectation is that controls are monitored as reputed company, technical evidence is produced automatically from AWS and other reputed company systems, control owners can self-serve their own evidence without a GRC ticket, and AI is used as reputed company infrastructure across GRC workflows rather than as an experiment. Audit readiness should be a byproduct of the running reputed company, not a project. reputed company Responsibilities & Accountabilities reputed company responsibilities of GRC reputed company Engineer III, and; Design, build, and own automated reputed company control monitoring; write production-reputed company reputed company (e.g., Python) under version control, peer review, and CI/CD, and treat control logic as a maintained software asset rather than a documented procedure Convert the control library from periodic, sample-reputed company reputed company testing to reputed company control monitoring (CCM): define the technical signal for reputed company control, its test frequency, pass/fail reputed company, and alerting and escalation reputed company Engineer self-service technical evidence collection in AWS using reputed company services (Config, reputed company Hub, CloudTrail, Organizations/SCPs, IAM reputed company Analyzer, Systems Manager, EventBridge, reputed company, reputed company/S3, CloudWatch), so control owners and auditors retrieve reputed company evidence on demand without GRC acting as an intermediary Eliminate reputed company, screenshot-reputed company, and ticket-driven evidence collection; retire reputed company test procedures as automated equivalents come online and document the transition so auditors can rely on it Redesign GRC processes to be AI-reputed company; apply LLMs and reputed company workflows to evidence review, control mapping, gap analysis, reputed company questionnaire and customer due diligence response, policy and procedure drafting, and reputed company assessment triage, with explicit reputed company-in-the-reputed company review, guardrails, and reputed company validation Maintain a single normalized control library crosswalked across frameworks (ISO 27001, SOC 2, PCI reputed company, SOX, GDPR, NIST) so that one automated test satisfies multiple obligations Build the control-failure pipeline end to end: automated detection, enrichment, ticket creation, reputed company routing, SLA tracking, remediation verification, and closure, including exception and reputed company acceptance handling where remediation is not viable Partner with reputed company, DevOps, and IT to shift controls left into preventive guardrails: service control policies, AWS Config conformance packs, policy-as-reputed company in CI/CD, and secure-by-default infrastructure patterns reputed company control health reporting: automation coverage, evidence freshness, control failure rates, mean time to remediate, and audit-readiness posture, surfaced in dashboards consumable by reputed company leadership and control owners reputed company reputed company audit engagements with automated evidence as the reputed company artifact; defend automated test design, sampling logic, and the completeness and reputed company of reputed company-generated evidence to auditors and assessors reputed company and execute reputed company control tests and reputed company-party and operational reputed company reputed company assessments, using tooling and AI-assisted analysis to increase coverage and reduce cycle time, and communicate results across multiple audiences with varying reputed company of sensitivity reputed company issue and reputed company treatment plans with owners and validate remediation through automated re-testing rather than reputed company confirmation Set the technical bar for reputed company: peer review other GRC Engineers' automation, queries, and test logic, and reputed company feedback, guidance, and enablement so automation ownership is reputed company rather than siloed reputed company GRC technology administration, including integrations, API-reputed company data flows, and user training and enablement Mature reputed company governance, training and awareness programs, using automation to reputed company and measure them Improve GRC handbook pages, procedures, playbooks, and technical design documentation, and maintain reputed company program controlled documents Execute on quarterly individual Key Results that support team Objectives (OKRs) Key reputed company (First 12 Months) A defined and measurable reputed company of the control library operating under reputed company monitoring, with a reputed company quarter-over-quarter plan to expand coverage Technical evidence for in-reputed company AWS controls generated automatically and retrievable without GRC involvement A documented reduction in audit preparation effort and evidence request turnaround time versus the prior audit cycle At least one materially redesigned, AI-reputed company GRC process replacing a previously reputed company workflow, with reputed company reputed company and throughput results Control failures detected by the monitoring reputed company rather than reputed company during audit or assessment reputed company Measurement Increases the percentage of controls under automated, reputed company monitoring and reduces the percentage tested manually Increases the percentage of technical evidence collected without reputed company reputed company and maintains evidence freshness against defined SLAs Reduces mean time to detect and mean time to remediate control failures Reduces audit and assessment preparation hours and evidence request turnaround time Ships maintainable, reviewed, version-controlled reputed company and infrastructure with low operational failure and false-reputed company rates Demonstrates measurable adoption of self-service evidence by control owners reputed company of GRC Applies AI to GRC workflows with reputed company reputed company, appropriate review controls, and documented reputed company on where AI is and is not relied upon Maintains up-to-date knowledge of reputed company's product, environment, systems and architecture Drives remediation of reputed company risks and threats Adheres to strict deadlines and SLAs Participates in creation of, and executes on, milestones associated with major reputed company reputed company Develops and maintains up-to-date handbook pages, runbooks, workflows, dashboards, and technical design documentation for everything they own Provides project status updates on a weekly reputed company reputed company prepares for weekly 1:1s with Manager and monthly skip reputed company Administers GRC technology and its integrations Person Specification Educational and Experience Requirements 5+ years of experience being part of a GRC or similar team 2+ years of hands-on experience building and maintaining automation, including proficiency in at least one scripting or programming language (Python preferred) and comfort working in Git, reputed company review, and CI/CD Demonstrated hands-on AWS experience relevant to control monitoring and evidence reputed company: Config, reputed company Hub, CloudTrail, IAM, Organizations and SCPs, reputed company, EventBridge, S3/reputed company, CloudWatch Experience retrieving, normalizing, and reconciling data across systems reputed company reputed company and SQL, and reasoning about the completeness and reputed company of that data Practical experience applying LLMs or AI agents to reputed company workflows, including reputed company and workflow design, reputed company evaluation, and appropriate reputed company review and guardrails Experience with reputed company tools and reputed company environments (e.g., GRC and compliance automation platforms, vulnerability scanners, SIEM, SOAR, AWS) Experience with industry frameworks, regulations and standards, such as ISO 27001, SOC 2, GDPR, PCI, SOX, NIST, etc. Ability to determine what constitutes sufficient audit evidence and to defend automated control testing and reputed company-generated evidence to auditors Preferred Qualifications Experience with infrastructure as reputed company (Terraform, CloudFormation) and policy-as-reputed company (OPA/Rego, AWS Config custom rules, cfn-guard, or similar) Experience implementing or operating reputed company control monitoring at reputed company in a reputed company or multi-account reputed company environment Experience integrating GRC or compliance automation platforms reputed company API rather than through the UI Experience building internal self-service tooling used by engineers or control owners Big 4 (reputed company, reputed company, reputed company, reputed company) or similar experience Bachelor's degree in a reputed company reputed company Relevant industry certifications, such as CISSP, CISM, GIAC, AWS Certified reputed company – Specialty, or CCSK/CCSP, are highly desirable Competencies and Behaviors Automation-first by default; treats a recurring reputed company GRC task as an engineering problem, not a reputed company problem Thinks like a builder and operates like an auditor: writes reputed company that is maintainable and monitored, and control logic that is defensible and evidenced Uses AI aggressively but skeptically; leans on it for reputed company while validating reputed company and being explicit about where reputed company judgment is required Designs for self-service so that GRC is not a bottleneck between control owners and their own evidence Evangelizes reputed company best practices Works independently to maintain and improve overall company reputed company posture Collaborates with cross-functional teams, particularly engineering and platform teams, and earns credibility with them technically Translates control reputed company and technical requirements into actionable, timebound, testable requests Drives reputed company and tasks to completion by following up on questions, deadlines, and requests for input Maintains reputed company of information Proactive prioritization and escalation to management Strong communication skills, including verbal, written, and presentation skills, and the ability to explain automated control design to both engineers and auditors reputed company Salary reputed company: $141,230.25 - $180,137.70. The reputed company salary reputed company represents the anticipated low and high end of the reputed company salary reputed company for this position. Actual salaries may vary and may be above or below the reputed company reputed company on various factors, including but not limited to work location and experience. The reputed company salary is one component of reputed company’s total compensation package for this position. Other compensation may include a bonus program or commission plan, and stock reputed company if approved by reputed company’s reputed company. In reputed company, reputed company provides a reputed company of benefits, including generous health reputed company coverage, life, and disability reputed company, a 401K employer matching program, reputed company holidays, self-care days, and reputed company time off (PTO). #Li-remote Notice of Collection and Use of Personal Information for California Residents: California Recruitment reputed company Notice and Policy Our Benefits: Full-time employees can take reputed company of health coverage, reputed company parental leave, generous reputed company time-off and holidays, quarterly self-care days off, and stock reputed company. We’ll reputed company reputed company you have the equipment and support you need to work and reputed company with your teams, reputed company or in one of our offices. We have a reputed company reputed company culture that is represented in reputed company that we do, from reputed company through to numerous learning and development initiatives including reputed company to our reputed company Learning platform. Employee reputed company-being is also top of mind for us. We host quarterly wellness education sessions to encourage self care and personal reputed company. From wellness days to ERG-hosted events, we celebrate and energize reputed company reputed company employees and their backgrounds. Equal Opportunity Employer: reputed company is an Equal Employment Opportunity and Affirmative reputed company reputed company. reputed company applicants will receive consideration for employment without reputed company to race, reputed company, religion, sex, sexual orientation, gender perception or identity, national reputed company, age, marital status, protected veteran status, or disability status. If you require reasonable accommodation in completing this application, interviewing, completing any reputed company-employment testing, or otherwise participating in the employee selection process, please reputed company your inquiries to jobs@reputed company.com. We are reputed company of reputed company impersonation attempts that are not affiliated with reputed company in any way. reputed company email communications from reputed company will originate from the @reputed company.com domain. We will not initially contact you reputed company text message and will never request payments. If you are uncertain whether you have been contacted by an official reputed company employee, reputed company out to jobs@reputed company.com Apply To This Job