Security GRC Engineer

Job Title:

Security GRC Engineer (AI Governance)

Location:

San Jose, CA // Onsite

Duration: 12 Months W2 Contract

Job Description:

MUST HAVE

SKILLS:

Data Governance, AI development and Governance, Security Risk Management

• Support the GRC operating model and the service-oriented customer engagement model.
• Provide Information Security Data Governance program expertise and drive the operational delivery of the program.
• Provide AI Governance and development expertise to business units and key stakeholders.
• Utilize current tools to design, build, and enhance team processes using AI agents and intelligent workflows.
• Maintain AI roadmaps and related communications to security leadership.
• Provide Information Security Risk Management support and assist with the operational delivery of the program.
• Develop and present regular operational and executive level metrics and reporting.
• Perform risk assessments to address security threats, changes to systems and/or applications, process improvement initiatives, supplier assessments (including downstream outsource rs) and other requests from the business.
• Collaborate with various operational and business teams to complete assessments, develop treatment plans, and drive remediation items to closure. Maintain accurate reporting of remediation activities to bring appropriate visibility to stakeholders and leadership.
• Monitor the security risk profiles and events of our suppliers to objectively determine high risk suppliers that require additional review and treatment plans.
• Act as security governance and risk management "ambassador” to internal customers.

• Competent industry certifications, and extra points for AI-related certifications.
• Candidate must have at least 7 years professional experience in governance, risk and compliance and/or information security and risk management.
• Functional knowledge of the CISSP security domains and information security industry standard and best practices.
• Functional knowledge of applicable security regulatory and compliance requirements (EU AI Act, SOX, GDPR). Functional knowledge of ISMS governance models and analysis of certification reports (i.e. ISO 42001 & 27001, SOC, CAIQ), information security roles, security controls.
• Ability to communicate information security methodologies and concepts to business units and IT teams.
• Ability to independently drive program areas and cross-functional teams to deliver high quality results according to well-defined planning.
• Strong interpersonal skills and ability to work effectively with diverse and globally distributed teams.
• Strong attention to detail, project management and organizational skills.
• Self-starter with the ability to effectively manage independent workloads asynchronously with stakeholders across multiple time zones.
• Define and communicate program and activity plans and roadmaps and collaborate effectively with all business and IT groups to achieve goals.