GRC Engineer

The role

The GRC Engineer will maintain Gainsight's governance, risk, and compliance program. This includes maintaining control frameworks, supporting audits, assessing third-party risk, and automating evidence collection.

What you will do

• Maintain multiple control frameworks and map controls to standards
• Track control ownership and health
• Meet with control owners to address gaps in controls
• Scope audits for both internal and external audits
• Work with auditors through the audit process from kick-off to completion
• Collect and review evidence for all frameworks to ensure compliance and traceability
• Track audit findings and remediations to completion
• Perform security reviews of all Third-Parties and Vendors
• Track vendor remediation items and maintain the vendor inventory
• Draft, update, and maintain all security policies, procedures, and standards regularly

Required qualifications

• 5+ years of experience in GRC, security compliance, IT audit, or risk management
• Working knowledge of security and compliance frameworks such as SOC 2, ISO 27001, and NIST
• Experience supporting external audits and assessments
• Experience performing risk assessments, maintaining a risk register, and reviewing the security posture of third-party vendors
• Familiarity with compliance automation or GRC tools
• Experience implementing security automation, such as scripting or workflow tools
• Understanding of cloud infrastructure and common security controls
• Clear written and verbal communication

Nice to have

• Experience with AI Governance frameworks
• Previous experience with highly regulated industries that require HIPAA or FedRamp
• Experience working with globally distributed teams
• Security certifications such as CISA, CRISC, or Security+ certifications

Benefits

• Corporate performance bonus
• Christmas bonus (Aguinaldo) per local requirements
• Medical
• Dental
• Vision
• Other local statutory benefits
• Mentoring
• Career development opportunities

About the company

Gainsight is the AI-powered retention engine behind the world’s most customer-centric companies. The Gainsight CustomerOS platform orchestrates the customer journey from onboarding to outcomes to advocacy.