At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.
Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.
When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.
Security GRC Engineer at BairesDev
As a Security GRC Engineer, you will be responsible for the development and maintenance of the organization's governance, risk, and compliance posture. You will act as a key liaison between technical teams and regulatory requirements, ensuring that our systems and processes align with integral security standards and industry best practices.
What You'll Do
Design, implement, and maintain enterprise security policies and procedures aligned with frameworks like SOC2 and ISO 27001.
Conduct comprehensive risk assessments to identify, evaluate, and mitigate potential security threats across the infrastructure.
Coordinate and facilitate internal and external audits, serving as the primary point of contact for compliance evidence collection.
Map security controls to various regulatory requirements to ensure continuous compliance and operational transparency.
Collaborate with cross-functional teams to integrate compliance requirements into the software development and deployment lifecycle.
Develop and monitor key performance indicators (KPIs) to measure the effectiveness of the security governance program.
What We Are Looking For
4+ years of experience in Security GRC, Compliance, or Information Security.
Proven expertise in implementing and managing compliance frameworks such as SOC2, ISO 27001, HIPAA, and PCI.
Proficiency in conducting risk assessments and control mapping acros