66K–87K GBP / year
Senior Security GRC Engineer
OtherRemote — UK
Published on 2026-10-16
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
The Senior Security GRC Engineer will help define and implement a Governance, Risk, and Compliance framework at Mozilla. This role involves performing risk assessments, maintaining compliance documentation, and supporting security programs within the organization. A collaborative mindset and hands-on experience with GRC platforms are crucial for success.
About the company
Mozilla builds open-source products and technologies, including Firefox, that prioritize privacy, security, and an open internet.
The team
Security Function within the Mozilla Infrastructure team.
What you'll do
- Perform risk assessments and maintain the risk register
- Support third-party risk activities, such as vendor assessments
- Coordinate evidence collection for audits
- Track audit gaps and findings
- Help with business impact analysis and business continuity activities
What we're looking for
- Experience in cybersecurity or GRC (typically 2-4 years)
- Knowledge of security and compliance frameworks like SOC 2 or ISO 27001
- Familiarity with risk management concepts
- Strong organizational skills
- Clear communication abilities with technical and non-technical stakeholders
Nice to have
- Experience with a GRC platform (e.g., Vanta, Drata)
- Exposure to vulnerability management or secure development practices
- Scripting or automation skills (e.g., Python, SQL)
Benefits
- Generous performance-based bonus plans
- Rich medical, dental, and vision coverage
- Generous retirement contributions
- Quarterly wellness days
- Country-specific holidays plus a day off for your birthday