GRC Engineer

We’re looking for a full-time GRC Engineer to join our Security team reporting to the Director of Security. This role is a remote role based in Mexico.

In this role, you'll play a key role in maintaining Gainsight's governance, risk, and compliance program and keeping the company audit-ready by maintaining control frameworks, supporting internal and external audits, assessing third-party risk, and automating evidence collection. This is a great opportunity for someone who thrives in a detail-oriented, SaaS and cloud-based environment and enjoys working cross-functionally with teams like Security, Engineering, IT, and Legal. The ideal candidate brings strong skills in GRC frameworks (SOC 2, ISO 27001, NIST), audit and risk management, and clear communication.

• Maintain multiple control frameworks and map controls to standards
• Track control ownership and health
• Meet with control owners to address gaps in controls
• Scope audits for both internal and external audits
• Work with auditors through the audit process from kick-off to completion
• Collect and review evidence for all frameworks to ensure compliance and traceability
• Track audit findings and remediations to completion
• Perform security reviews of all Third-Parties and Vendors
• Track vendor remediation items and maintain the vendor inventory
• Draft, update, and maintain all security policies, procedures, and standards regularly
• Answer customer security questionnaires and requests
• Support customer audits and provide compliance documentation where required
• Manage the risk register including exceptions, acceptance, expiry
• Build and maintain integrations and automation for evidence collection and control monitoring
• Work with engineering teams to align technical controls to business requirements

This role may require occasional travel (up to 10-25%) for team meetings, training, or company events. This is not a complete list of responsibilities, and the scope of the role may evolve with the needs of the team and business.

What We're Looking For:

…