123K–172K USD / year
Security Engineer, GRC
OtherRemote — United States, Canada
Published on 2026-11-10
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Support and scale governance, risk, and compliance programs, including commercial audits and federal compliance. Translate complex requirements into practical controls and workflows, and improve GRC operations through automation and carefully validated AI-assisted solutions.
About the company
1Password provides secure password management solutions for individuals and businesses, helping users safely store and share their sensitive information. The company serves a diverse clientele with a range of products designed to enhance security and streamline user experience.
The team
Governance, Risk, and Compliance (GRC) team
Stack
DrataTinesVantaServiceNowArcherLogicGateSecureframeAPIs
What you'll do
- Manage initiatives across commercial and federal compliance, security risk, vendor risk, policy management, and customer trust.
- Support assessment preparation, remediation, and continuous monitoring for FedRAMP, CMMC, and NIST 800-53 programs.
- Coordinate with control owners, internal teams, auditors, and assessors to gather evidence, track actions, and resolve gaps.
- Improve evidence generation, validation, mapping, storage, and traceability.
- Monitor control health, evidence freshness, configuration drift, exceptions, and remediation progress.
- Build or configure automated and AI-assisted workflows for compliance and risk processes.
What we're looking for
- At least three years of experience in security, compliance, risk, audit, GRC, program management, or a related technical discipline.
- Experience managing cross-functional compliance or security initiatives.
- Experience applying a framework such as SOC 2, ISO 27001, NIST 800-53, CMMC, FedRAMP, or PCI DSS.
- Ability to translate framework requirements into controls, policies, procedures, test cases, evidence requirements, and workflows.
- Experience with GRC platforms and automation such as APIs, scripts, webhooks, ticketing workflows, or cloud and identity integrations.
- Actively use AI and understand the need for validation, human judgment, and review.
Nice to have
- Experience supporting FedRAMP or comparable federal compliance programs.
- Familiarity with authorization boundaries, POA&Ms, continuous monitoring, 3PAO coordination, assessment preparation, or remediation.
Benefits
- Equity grant
- Generous paid time off
- Health and dental benefits
- 401(k) or RRSP retirement matching
- Parental leave top-up
- Paid volunteer days