95K–139K CAD / year
Senior Security GRC Engineer
OtherRemote — Canada
Published on 2026-10-16
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
The Senior Security GRC Engineer will help define and implement a Governance, Risk, and Compliance framework at Mozilla. Responsibilities include managing risk assessments, compliance audits, and supporting security programs. The ideal candidate should have a background in cybersecurity or GRC, and a strong desire to learn.
About the company
Mozilla builds open-source products and technologies, including Firefox, that prioritize privacy, security, and an open internet.
The team
Security Function within the Mozilla Infrastructure team
What you'll do
- Perform risk assessments and maintain risk register
- Coordinate evidence collection for audits
- Support third-party risk activities
- Help maintain documentation for SOC 2 compliance
What we're looking for
- 2-4 years of experience in cybersecurity or GRC
- Working knowledge of SOC 2, ISO 27001, or NIST
- Strong organization and follow-through skills
- Experience with GRC platforms
Nice to have
- Exposure to vulnerability management
- Understanding of business continuity planning
- Scripting skills in Python or SQL
Benefits
- Generous performance-based bonus plans
- Rich medical, dental, and vision coverage
- Quarterly wellness days
- Annual professional development budget