Senior Information Security Engineer

📋 Description Lead GRC across ISO 27001, 22301, 42001, SOC 2 II, GDPR, EU AI Act. Blend governance with hands-on security topics (BCMS, AI security, cloud). Automate evidence collection, control monitoring, policy enforcement, reporting. Integrate checks into CI/CD toolchains and existing tooling. Create reusable templates, playbooks, and blueprints for GRC activities. Partner with engineering and IT to embed security checks in pipelines. 🎯 Requirements 5+ years in information security, governance, risk, or compliance (technical) Auditing/compliance experience with at least one major framework Strong controls auditing and evidence management knowledge Knowledge of risk management methodologies and risk assessments Ability to manage multiple complex projects with minimal supervision Cloud-based SaaS security knowledge; cross-functional collaboration