GRC Engineer

About Our Client

The organization operates in the behavioral healthcare sector, addressing the challenges faced by individuals with mental health conditions, substance use disorders, and eating disorders. It focuses on overcoming barriers such as limited local options, long wait times, and impersonal treatments by providing personalized virtual care that connects clients with clinicians, care teams, and supportive communities. The program emphasizes care for people with complex needs, expanding access to meaningful treatment and improving outcomes remotely. As a rapidly growing entity, it is expanding its reach to support more communities.

About the Opportunity

The GRC Engineer role involves developing and maintaining automated, measurable systems that support compliance, risk management, and control programs aligned with HIPAA, SOC 2, NIST, and other standards. This position is key to transforming manual compliance activities into scalable, continuously monitored processes, ensuring the protection of sensitive data and strengthening the organization’s assurance capabilities in a regulated healthcare environment.

Responsibilities

• Design and operate automated controls for compliance frameworks including HIPAA, SOC 2, NIST, and ISO 27001
• Translate compliance requirements into technical controls, workflows, and evidence pipelines
• Build scalable systems to reduce manual compliance efforts and improve control effectiveness
• Collaborate with Security, IT, Compliance, and Engineering teams to integrate control requirements
• Develop continuous control monitoring across various platforms and systems
• Define metrics, alerts, and reports for control health and effectiveness
• Identify and remediate control gaps and exceptions
• Automate audit evidence collection from enterprise systems
• Create repeatable workflows supporting audits and risk reviews
• Configure and enhance GRC platforms and related tools
• Develop integrations and dashboards to report on control status and risk trends
• Maintain documentation for controls and operational procedures
• Support risk assessments and remediation tracking
• Manage workflows for risk acceptance and exception handling
• Evaluate and support AI governance and emerging compliance automation
• Stay informed on new compliance automation and AI-enabled GRC approaches

Requirements

• Minimum 5 years in GRC engineering, compliance automation, IT risk, security operations, or related fields
• Practical experience translating compliance and risk requirements into technical controls and automations
• Familiarity with HIPAA, SOC 2, NIST, ISO 27001, HITRUST, PCI, or FedRAMP frameworks
• Experience with enterprise systems such as Okta, Google Workspace, AWS, Jamf, Intune, SentinelOne, Wiz, Jira, Confluence, Slack
• Proficiency with APIs, scripting, and workflow automation tools like Python, Bash, PowerShell, Workato, Terraform, REST APIs, webhooks, or JSON