Security Compliance, GRC Engineer

Job summary

Responsibilities

As a GRC Engineer, you will be at the heart of Mistral’s Governance, Risk, and Compliance (GRC) program. You will design, implement, and maintain the technical and operational frameworks that ensure our organization meets its regulatory, security, and risk management obligations.

• Automate GRC workflows: Design, develop, and deploy automation scripts and tools to streamline compliance monitoring, evidence collection, risk assessments, and control testing.
• Integrate GRC tools with existing systems: Build and maintain integrations between GRC platforms and other enterprise systems (e.g., SIEM, IAM, or ticketing tools) to enable…
• Develop custom dashboards and reports: Create automated dashboards to provide real-time visibility into compliance status, risk exposure, and control effectiveness for…
• Automate control testing and validation: Implement automated control testing for technical controls (e.g., access reviews, patch management, or configuration compliance) to…
• Enforce policy-as-code: Embed compliance and security policies directly into cloud and on-premise environments, ensuring consistent enforcement across systems.

What they're looking for

• 5+ years in Governance, Risk, and Compliance (GRC), IT audit, cybersecurity, or a related field.
• Hands-on experience with GRC tools.
• Deep knowledge of compliance frameworks such as ISO 27001, SOC 2, NIST CSF, COBIT, or regulatory requirements like GDPR, NIS2, or HIPAA.
• Proficiency in scripting and automation to streamline GRC processes.
• Strong understanding of IT controls, risk assessment methodologies, and security best practices.

Tech stack

• AWS
• Azure
• GCP