{bc}
Apply
workday

Senior GRC Engineer

Qualys
Pune, IND
Full-time
Senior
Onsite
Discovered 6 days ago
awsazuregcpservicenow

Full Job Posting

Key Responsibilities:

  • Framework Architecture & Control Management
  • Design Control Libraries: Build and maintain scalable, reusable security and compliance control libraries across the organization.
  • Framework Mapping: Translate complex regulatory and industry standards into standardized, actionable control definitions.
  • Risk & Policy Alignment: Map evidence requirements across overlapping compliance frameworks to eliminate redundancy and support the ISO & NIST Risk Management Frameworks.
  • Compliance Automation & Evidence Engineering
  • Evidence Modeling: Define standardized evidence artifacts, validation logic, and assessment criteria for automated control evaluation.
  • Engineering Collaboration: Partner with engineering and security teams to build automated evidence collection pipelines and continuous compliance monitoring.
  • Data-Driven GRC: Build compliance content and metadata rule libraries using structured data formats (JSON/YAML) to scale platform capabilities.
  • Audit Readiness & Framework Implementation
  • NIST & ISO Implementation: Drive the practical design, implementation, and mapping of NIST (CSF / SP 800-53 / RMF / SOC 2) and ISO 27001/27002 control frameworks across technical environments.
  • Assessment Guidance: Define clear implementation guidance, control validation criteria, and self-assessment objectives for technical teams.
  • Continuous Improvement: Continuously refine GRC workflows, tooling, and framework content as standards and organizational needs evolve.
  • Qualifications & Skills:

Required Experience

  • Framework Implementation: Required hands-on experience implementing, operationalizing, and mapping ISO 27001/27002 and NIST SP 800-53 / NIST CSF / NIST RMF frameworks. Experience with PCI DSS, SOC 2, and CIS Controls is a strong plus.
  • Audit Readiness: Demonstrated ability to prepare technical environments and control owners for external audits through structured evidence management and control readiness models.
  • Risk Management: Deep understanding of ISO and NIST Risk Management Frameworks, including risk assessment methodologies, control testing, and remediation workflows.
  • Technical Aptitude: Understanding cloud platforms (AWS, Azure, or GCP), Identity & Access Management (IAM), and core security technologies.
  • Data & Automation: Experience working with structured data formats (JSON, YAML) to define validation logic or control metadata.
  • Evidence Management: Familiarity with evidence mapping, automated evidence validation, and modern compliance testing concepts.
  • Professional Competencies
  • Analytical Thinking: Ability to decompose complex regulatory texts into clear, practical engineering specifications.
  • Cross-Functional Collaboration: Excellent technical communication skills with the ability to bridge conversations between technical engineers, product teams, and management.
  • Documentation & Precision: High attention to detail in defining control definitions, test procedures, and architectural mappings.
  • Preferred Qualifications (Bonus)
  • Industry certifications such as CISA, CRISC, CISM, or CISSP.
  • Hands-on experience with GRC automation platforms (e.g., ServiceNow GRC, Vanta, Drata, Anecdotes, or custom GRC platforms).
  • Background in software engineering, security engineering, or compliance automation.

Preferred Qualifications

  • Preferred Qualifications (Bonus)

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Qualys

Channel Account Manager - Southeast

, USA

Discovered 2 days agoFull-time

Technical Account Manager, Inside Sales, GSI

Pune, IND

Discovered 3 days agoFull-time

Senior Software Engineer

Pune, IND

Discovered 3 days agoFull-time

Sr. PMM

Pune, IND

Discovered 4 days agoFull-time

Senior Director, Government Product Security Management

, USA

Discovered 5 days agoFull-time

Lead Database Reliability Engineer

Pune, IND

Discovered 1 weeks agoFull-time

Site Reliability Engineer, Cloud Platform

Pune, IND

Discovered 1 weeks agoFull-time

Senior QA Engineer

Pune, IND

Discovered 1 weeks agoFull-time