68K–91K EUR / year
Senior Security GRC Engineer
OtherRemote — Germany
Published on 2026-10-16
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
The Senior Security GRC Engineer will be part of Mozilla's Security Function, responsible for defining and implementing a Governance, Risk, and Compliance (GRC) framework. The role involves performing risk assessments, maintaining compliance documentation, and supporting security programs, ideal for someone early in their GRC career.
About the company
Mozilla builds open-source products and technologies, including Firefox, that prioritize privacy, security, and an open internet.
The team
Security Function within Mozilla Infrastructure team
What you'll do
- Perform risk assessments and manage risk questions
- Maintain the risk register and track risk treatment plans
- Coordinate evidence collection for audits
- Support GRC governance for Secure Software Development Lifecycle
- Assist with business continuity and disaster recovery activities
What we're looking for
- 2-4 years in cybersecurity, GRC, or IT audit
- Knowledge of security frameworks like SOC 2, ISO 27001
- Familiarity with risk management concepts
- Strong organizational skills and ability to manage multiple tasks
- Proficient in written and verbal communication
Nice to have
- Experience with GRC platforms
- Support for SOC 2 or similar audits
- Exposure to vulnerability management or secure development practices
- Scripting skills in Python or SQL
Benefits
- Generous performance-based bonus
- Rich medical, dental, and vision coverage
- Generous retirement contributions
- Quarterly wellness days
- Professional development budget