Salary not listed
Senior Security GRC Engineer
OtherWorkplace — unknown
Published on 2026-10-16
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
The Senior Security GRC Engineer will work within the Security Function of Mozilla's Infrastructure team to develop and implement a Governance, Risk, and Compliance (GRC) framework. This role involves risk management, compliance coordination, security program support, and GRC operations. The ideal candidate should possess a background in cybersecurity or IT audit and be eager to learn and contribute.
About the company
Mozilla builds open-source products and technologies, including Firefox, that prioritize privacy, security, and an open internet.
What you'll do
- Perform risk assessments and process incoming risk questions
- Maintain the risk register and document entries
- Support third-party risk activities and vendor assessments
- Coordinate evidence collection for audits
- Track audit gaps and drive remediation
What we're looking for
- Experience in cybersecurity, GRC, IT audit, or related field
- Knowledge of security and compliance frameworks like SOC 2 and ISO 27001
- Familiarity with risk management lifecycle
- Strong organizational skills
- Effective communication with technical and non-technical stakeholders
- Experience with GRC platforms
Nice to have
- Scripting or automation skills
- Exposure to vulnerability management or secure development practices
Benefits
- Performance-based bonus plans
- Rich medical, dental, and vision coverage
- Generous retirement contributions
- Wellness and professional development stipends
- Paid parental leave
- Home office stipend