Description
A-LIGN is hiring a full-time Senior GRC Engineer to own audit evidence collection, technical control maintenance, and audit readiness across FedRAMP, ISO 27001, ISO 42001, SOC 2, NIST 800-53, and NIST 800-171. The role bridges GRC and technical teams, supports continuous monitoring and external assessor activities, automates evidence collection, maintains compliance documentation, and contributes to risk assessments, threat modeling, security reviews, and AI technical safeguards. Candidates need a bachelor's degree in a relevant field, at least five years of information security, GRC, IT audit, or compliance engineering experience, and hands-on experience with cloud, code-repository, and Microsoft 365 environments.
