Security Engineer, GRC

The role

You will build and scale programs for commercial audits, federal compliance, security risk management, vendor risk, policy management, and customer trust. You will turn complex requirements into practical controls and automated workflows using AI and GRC platforms.

What you will do

• Manage GRC initiatives for commercial and federal compliance, security risk, vendor risk, policy management, and customer trust.
• Support planning, assessment preparation, remediation, and continuous monitoring for FedRAMP, CMMC, NIST 800-53, and related programs.
• Partner with control owners, Security, Engineering, Legal, Privacy, auditors, assessors, and business stakeholders.
• Define and improve how evidence is generated, validated, mapped, stored, and traced.
• Monitor control health, evidence freshness, configuration drift, exceptions, and remediation progress.
• Build or configure automated and AI-assisted workflows.
• Maintain project plans, action trackers, risk logs, documentation, and status updates.

Required qualifications

• Three or more years of experience in security, compliance, risk, audit, GRC, program management, or a related technical discipline.
• Manage moderately complex, cross-functional compliance or security initiatives.
• Apply one or more security or compliance frameworks, such as SOC 2, ISO 27001, NIST 800-53, CMMC, FedRAMP, PCI DSS, or similar standards.
• Work with GRC platforms such as Drata, Tines, Vanta, ServiceNow, Archer, LogicGate, Secureframe, or comparable tools.
• Use automation techniques such as APIs, scripts, webhooks, ticketing workflows, and cloud or identity integrations.
• Actively use AI in day-to-day work and show a clear trajectory toward building with it.

Nice to have

• Support FedRAMP or comparable federal compliance programs in a program management, project management, or cross-functional coordination capacity.
• Familiarity with authorization boundaries, assessment preparation, Plans of Action and Milestones (POA&Ms), continuous monitoring, Third-Party Assessment Organization (3PAO) coordination, or remediati

Benefits

• Health benefits
• Dental
• 401k (USA) or RRSP (Canada)
• Generous paid time off
• Equity grant
• Incentive programs
• Maternity and parental leave top-up programs
• RSU program for most employees
• Retirement matching program
• Free 1Password account
• Paid volunteer days
• Peer-to-peer recognition through Bonusly

Before you apply

• Join live interviews without using AI tools.
• Successful applicants will be required to complete a background check including employment verification, reference checks, education confirmation, criminal background, social media, or credit history.

About the company

1Password builds the foundation for a safe, productive digital future through enterprise password management and Unified Access Management. The company serves over 180,000 businesses, including Fortune 100 leaders.