Senior GRC Engineer at J.D. Power leading governance, risk, and compliance initiatives across SOC 2, TISAX, and DORA frameworks — driving audit remediation, maintaining control frameworks, managing risk registers, and building governance metrics and dashboards for leadership. Core tooling includes GRC platforms like ServiceNow, Archer, and AuditBoard.
Compensation
$140K–$165K / yr
Location
United States
Work setup
Remote
Seniority
Senior
Employment
Full time
Experience
7+ years
Category
Security
Posted
Skills
analytics
cad
cism
cissp
cybersecurity
iso-27001
pci-dss
risk-assessment
saas
servicenow
soc-2
Must have
7+ years in GRC, audit, or compliance engineering roles with success managing parallel engagements
Deep hands-on experience with SOC 2, ISO 27001, and enterprise audit processes
Proficiency with GRC platforms (ServiceNow, Archer, AuditBoard, or equivalent)
Strong technical understanding of IT controls, security frameworks, and risk methodologies
Excellent communication skills for audit coordination, exception tracking, and board-level reporting
Experience developing metrics and dashboards that communicate risk posture to executive leadership
Nice to have
CISSP, CISM, or CRISC certification
Experience with DORA, PCI DSS 4.0, or EU regulatory frameworks
Background in B2B SaaS compliance and customer audit programs
Experience managing multiple concurrent audit frameworks and regulatory examinations
Full description
Job Description:Job Title: Senior GRC Engineer
Location: Remote | USA, Canada
Reports to: Cybersecurity Governance Manager
Employment Type: Full-time
This is a new vacancy
About the Role:
Senior GRC Engineer to lead governance, risk, and compliance initiatives across enterprise frameworks. This role is critical as the organization faces active audit cycles for SOC 2, TISAX, and DORA compliance, with findings visible to customers and the board. You will drive audit remediation with fixed deadlines, maintain control frameworks, and ensure stakeholder confidence through transparent governance and metrics.
You will reduce the audit remediation backlog from months to weeks, establish sustainable compliance processes, and become the trusted advisor to both internal leadership and external auditors. Success means audit findings visible to customers are resolved on schedule, governance metrics are accurate and trusted, and the organization transitions from reactive compliance to proactive risk management.
In this role, you will:
Lead SOC 2, TISAX, and DORA audit remediation efforts with fixed deadlines and stakeholder visibility
Manage enterprise risk assessment and risk treatment processes, including risk register maintenance and acceptance reviews
Direct audit evidence collection, control documentation, finding resolution, and audit coordination across all frameworks
Develop and maintain governance metrics, KRIs, and reporting dashboards visible to customers and board
Build and evolve the organization's control frameworks aligned with customer and regulatory requirements
Manage Plan of Action and Milestones (POAM) tracking and vulnerability remediation governance
Coordinate with business units, executives, and audit partners on compliance obligations and risk reporting
Required Qualifications:
7+ years in GRC, audit, or compliance engineering roles with demonstrated success managing parallel engagements
Deep hands-on experience with SOC 2, ISO 27001, and enterprise audit processes
Proficiency with GRC platforms (ServiceNow, Archer, AuditBoard, or equivalent)
Strong technical understanding of IT controls, security frameworks, and risk methodologies
Excellent communication skills for audit coordination, exception tracking, and board-level reporting
Experience developing metrics and dashboards that communicate risk posture to executive leadership
Preferred Qualifications:
CISSP, CISM, or CRISC certification
Experience with DORA, PCI DSS 4.0, or EU regulatory frameworks
Background in B2B SaaS compliance and customer audit programs
Experience managing multiple concurrent audit frameworks and regulatory examinations
Compensation and Benefits
This position has a starting salary range of $120,000 - $145,000 CAD / $140,000 - $165,000 USD per year. The range represents what we reasonably and in good faith expect to pay for the role at the time of posting. An employee’s pay within the range is determined by a number of factors, including relevant skills, education, qualifications, experience, performance, business or organizational needs, and geographic location.
Eligible employees may participate in medical, dental, vision, disability, life insurance, retirement savings programs, paid time off, wellness programs, and other company-sponsored benefits. Benefits vary by country and employment status.
Why Join JD Power
JD Power powers auto-related decisions through proprietary data, advanced analytics, deep industry expertise, and workflows that connect insight to action. Operating across North America, Europe, and Australia, we help customers make better decisions and achieve better outcomes.
As a virtual-first company, we offer flexible work arrangements, opportunities for learning and development, and a culture centered on the Values that guide how we work every day.
· We power our customers’ success. Everything we do is focused on helping customers make better decisions and achieve better outcomes.
· We are innovative, collaborative, and grounded in data. We combine advanced analytics with human expertise to deliver insight that holds up in the real world.
· We make things easy. We turn complexity into clarity so teams can act faster and with confidence.
· We get it done. We focus on execution, accountability, and results.
· We start with trust and prove it every day. Independence, integrity, and credibility are the foundation of our work.
Equal Opportunity & Accommodations
JD Power is committed to employing a diverse workforce. Qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, gender expression, veteran status, or disability.
JD Power is committed to providing reasonable accommodations throughout the recruitment process for individuals with disabilities or other protected needs under applicable local laws. Please contact for accommodation request.
Data Privacy
JD Power does not disclose your personal data to unauthorized third parties. However, as a global corporation consisting of multiple affiliated companies in various countries, JD Power has international sites and JD Power uses resources located throughout the world. JD Power may from time to time also use third parties to act on JD Power’s behalf. You agree to the fact that to the extent necessary your personal data may be transferred and/or disclosed to any company within JD Power group of companies as well as to third parties acting on JD Power’s behalf, including also transfers to servers and databases outside the country where you provided JD Power with your personal data. Such transfers may include for example transfers and/or disclosures outside the European Economic Area and in the United States of America. If you are a California or United Kingdom resident, additional disclosures about the information we collect and how we use that information can be found by clicking here.
Applications
Candidates must be legally authorized to work in the country where employment is offered. JD Power does not provide employment sponsorship for this position.
This position is posted exclusively on and select trusted job boards such as LinkedIn or Indeed. All official communication comes from email addresses ending in @jdpower.com or @jdpa.com. We will never ask for payment, equipment purchases, or upfront fees. We may take additional steps to verify candidate information to protect the integrity of our recruitment process.
To all recruitment agencies: JD Power does not accept unsolicited agency resumes and we are not responsible for any fees related to unsolicited resumes.