Sr Engineer, Governance, Risk & Compliance

Job Description: The Sr. Security Engineer develops solutions leveraging Governance, Risk & Compliance (GRC) platforms, security technologies, and automation to support Information Security and GRC operations. The ideal candidate has experience administering enterprise GRC platforms, configuring workflows, automating business processes, integrating technologies, and developing operational reporting, dashboards and workflow automation to support Audit, Compliance, Enterprise Risk, Third-Party Risk Management (TPRM), Identity Governance, Privacy, Business Continuity, Security Awareness, and AI Governance. Develop solutions using GRC platforms, security technologies, and automation to support Information Security and Governance, Risk & Compliance (GRC) initiatives Serve as system administrator for enterprise GRC platforms and supporting technologies including Third-Party Risk Management (TPRM), Risk Register, Privacy Management, Security Awareness, Identity Governance, Business Continuity, AI Governance, and related GRC solutions. Configure and maintain GRC workflows, forms, questionnaires, dashboards, control libraries, evidence management, and reporting capabilities. Perform platform administration, upgrades, testing, user provisioning, troubleshooting, release validation, and technical support. Provide technical and operational support for the TPRM platform, including platform configuration, user support, workflow enhancements, issue resolution, testing, and release validation. Configure and administer Identity Governance workflows including user access certification campaigns, periodic access reviews, remediation tracking, and governance reporting. Administer Phishing tool and related security awareness technologies, including phishing simulations, mandatory training campaigns, completion tracking, and awareness reporting. Collect operational metrics from Information Security, IT, Engineering, Privacy, Compliance, Risk, and other business teams; automate data collection where feasible; and develop CISO dashboards, executive reporting, KPI/KRI metrics, and recurring operational reports. Configure workflow automation across GRC platforms to streamline business processes, improve operational efficiency, and reduce manual effort. Support integration of GRC platforms with ServiceNow, IAM, CMDB, ITSM, HR systems, vulnerability management, security tools, and API-based integrations. Provide technical support for audit and compliance platforms, including platform configuration, workflow enhancements, reporting, issue resolution, testing, and release validation. Configure and administer Privacy Impact Assessment (PIA), Data Protection Impact Assessment (DPIA), privacy workflows, dashboards, and operational reporting. Configure and support Business Continuity and Disaster Recovery (BC/DR) technologies, including Business Impact Analysis (BIA) workflows, testing schedules, resilience dashboards, remediation tracking, and evidence…