Senior GRC Engineer

2 days ago

Stockholm, SwedenSenior

Responsibilities

Build production systems that collect, validate, preserve, and monitor technical control evidence.
Automate shared security controls and write tests to verify that controls operate as designed.
Connect requirements, controls, implementations, tests, evidence, policies, and procedures.
Detect missing, stale, incomplete, or failed evidence and route issues to owners with traceable records.
Build workflows that identify drift between approved policies and technical implementations.
Prepare reproducible evidence packages and serve as a technical subject matter expert during audits.
Partner with security, compliance, legal, engineering, and go-to-market teams on security and compliance requirements.
Build, deploy, and operate maintainable GRC automation with version control, testing, monitoring, and documentation.

Demonstrated ability to build and operate production software, automation, or data pipelines.
Experience working with application programming interfaces, cloud services, and structured data from multiple systems.
Ability to translate security or compliance requirements into technical controls and testable conditions.
Ability to design evidence records with provenance, scope, collection time, and retention requirements.
Experience building monitoring for failed collection, stale evidence, and control failures.
Strong software engineering practices, including testing, version control, and code review.
Ability to explain technical controls and evidence to engineers, compliance colleagues, and auditors.
Ability to make independent engineering decisions and balance automation with access control, data minimisation, and operational safety.
Bonus experience with ISO 27001, C5, SOC 2, controls as code, policy as code, continuous control monitoring, infrastructure as code, cloud security, identity systems, or regulated environments.
Experience integrating compliance platforms with technical data sources or using AI for control mapping, evidence review, or policy analysis is advantageous.
A particular degree, certification, or GRC platform is not required; demonstrated capability is valued.

Competitive salary and company stock options.
30 days of paid holiday per year.
5,000 SEK wellness allowance plus 6,000 SEK annually for other health-related initiatives.
Parental leave top-up for new parents.
Private medical insurance and mental health support through Mindler.
Pension programme and regular social and team activities, including off-sites and seasonal events.
Primarily based at the headquarters in central Stockholm.
Background check conducted before hiring.

51-200 employees