Who can apply: US-based role. The employer has not said which states are eligible — confirm before applying.
Location as listed by the employer: “Panama City, Panama - In-Office Hybrid; United States”
Apply on A-LIGN External's site ↗
Opens the employer's official application page.
Generate a CV for this job
Generate my CV
A CV tailored to this job's requirements in one click — boosted with testimonials from people who know your work.
About this role
A-LIGN External is hiring for a Senior GRC Engineer role. See the official posting for full details.
Requirements
- 5+ years of experience in information security, GRC, IT audit, or compliance engineering roles
- Hands-on experience with audit evidence collection and technical control validation for at least one of the following required: FedRAMP, GovRAMP, NIST 800-53, or NIST 800-171
- Additional experience with ISO 27001, ISO 42001, or SOC 2 preferred but not required
- DevSecOps or cloud engineering experience sufficient to independently locate and extract evidence from GCP, GitHub, and Microsoft 365/Entra ID environments
- Experience with GRC platforms and evidence automation (AuditBoard, Vanta, Drata, or similar)
- Experience supporting external audits and assessor interactions, including 3PAO assessments
- Working knowledge of vulnerability management, CI/CD pipelines, infrastructure-as-code, and identity and access management concepts
- Experience scripting or automating evidence collection (Python, PowerShell, or similar) preferred
Summarized from the employer's posting — check the full posting for every requirement.
New remote jobs for your state, by email.
A short digest only when there's something new. Confirm by email, unsubscribe anytime.