Senior Cybersecurity Engineer, GRC Automation and Continuous Control Monitoring
MPC Capital AG20 hours ago
Houston, TX, USA or San Antonio, TX, USASenior
Responsibilities
- Analyze cybersecurity solution changes and their relationships to internal and external systems to assess control effectiveness and risk.
- Design, implement, and scale GRC automation, continuous control monitoring, automated evidence collection, control testing, and risk intelligence capabilities.
- Develop deterministic control-testing logic and AI- or LLM-backed workflows for evidence-to-control mapping, attestation drafting, drift detection, and audit-package assembly.
- Integrate and normalize API, telemetry, configuration, vulnerability, identity, ticketing, and assessment data into control-level evidence pipelines.
- Investigate cyber incidents, control failures, compliance exceptions, business-impacting events, and risk indicators.
- Lead security initiatives, policies, compliance requirements, continuous monitoring practices, process improvements, automation, and remediation efforts.
- Collect, validate, and report security metrics, control performance results, and remediation activities.
- Develop standard operating procedures and provide cybersecurity consulting, guidance, and support to stakeholders.
- Translate security and compliance requirements into build and configuration processes.
- Monitor emerging IT/OT, cybersecurity, automation, and artificial intelligence technologies and their effect on the risk and compliance landscape.
Requirements
- Bachelor’s degree in information technology, a related field, or equivalent experience.
- At least 5 years of relevant experience.
- Experience designing, implementing, and scaling GRC, CCM, or compliance automation solutions in a regulated environment.
- Experience with Python or comparable automation technologies and with automated workflows and REST API-based integrations across enterprise systems.
- Hands-on experience integrating security-control data sources into GRC or CCM evidence pipelines for continuous control testing.
- Experience normalizing data across at least three domains, including CNAPP/CSPM, SIEM/security data lake/XDR, CTEM/VM/ASPM, DSPM, ITSM, IAM, GRC/CCM, or AI/agent governance.
- Professional certification such as Security+, Network+, OSCP, GIAC, or CEH is preferred.
- Experience building LLM-backed agentic workflows with Azure AI Foundry, GitHub, or open-source frameworks is preferred.
- Familiarity with NIST AI RMF, the OWASP LLM Top 10, or comparable AI risk frameworks is preferred.
Benefits
- Full-time regular employment with locations in San Antonio, Texas; Findlay, Ohio; and Houston, Texas.
- Health, vision, and dental insurance.
- Paid time off, 401(k) matching, paid parental leave, and educational reimbursement.
- Eligibility for a discretionary company-sponsored annual bonus program.
About MPC Capital AG
MPC Capital AG is a Hamburg-based, publicly listed investment and asset manager focused on maritime shipping and energy infrastructure for institutional investors and industrial partners. Founded in 1994 and listed on the Frankfurt Stock Exchange (Scale segment), it develops, structures, finances, and manages real-asset platforms and funds, and also operates underlying vessels and energy assets. Its activities span shipping, renewables, and related infrastructure across global markets.