ezCater

1 month ago

Staff GRC Engineer (Remote)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 22 hours agoStatus: Live

Job Summary

Senior, hands-on GRC engineer shaping ezCater's governance, risk, and compliance program for a SaaS/cloud environment. Build automated control frameworks, drive AI governance strategy, and partner with audit, Legal, Data, and IT to ensure scalable, reliable evidence-driven compliance across SOC 2, PCI, and SOX.

Location: Boston

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Lead control program maturity: design and maintain an auditable control framework for ezCater’s SaaS, cloud, data, and engineering environment; define how controls are implemented, tested, evidenced, and improved with automated evidence paths.
•Build continuous control monitoring and automation: identify controls that should be near real-time, automate testing, evidence collection, validation, and recurring compliance workflows with stakeholders across Security, IT, Data, and platform teams.
•Expand data security policy and program quality: mature data security policies and handling requirements; ensure data governance is reflected in access patterns, labels, masking, retention, and evidence paths.
•Drive operational quality improvements: support day-to-day GRC operations, remediation coordination, audit readiness, and develop reusable materials for questionnaires and vendor reviews.
•Lead through influence and systems thinking: own a domain with autonomy, align stakeholders, mentor others, and raise the overall maturity of the Security Engineering & Compliance team.

Pay and Benefits

Salary: USD 165,000 - 210,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceDental401kEquityRemote WorkPaid HolidaysPaid Leave

Key Requirements

•8+ years experience in security GRC, compliance, risk, or security program work in a SaaS or cloud-native environment, with meaningful ownership of control design, testing, and program improvement.
•Strong experience with security compliance frameworks such as ISO-27001, NIST CSF, SOC 2, ITGC, and PCI-DSS, translating framework requirements into real-world controls.
•Demonstrated ability to automate or instrument parts of a compliance or assurance program via scripting, APIs, dashboards, platform configuration, or other technical approaches.
•Implementation of engineering guardrails for ensuring compliance using Policy-as-Code (Terraform) or secure configurations of cloud-hosted platforms (AWS, GitHub, etc.).
•Experience building or improving data security governance, handling rules, access design, masking, retention, and evidence paths; familiarity with AI governance is a plus.

Experience:8+ years

Skills:CommunicationCross-functional influenceProblem-solvingLeadershipMentorship

Languages:English

Tech Stack:TerraformAWSGitHubAPIsDashboardsScriptingAutomationPolicy-as-code

Company Brief

ezCater

Operates an online marketplace connecting businesses with local caterers and restaurants for corporate and group catering orders, offering ordering, delivery coordination, and catering management tools.

Industry: Online Marketplaces

Company Size: Enterprise (1,001+ employees)

Growth: Established Company

Headquarters: Boston, United States

Founded: 2007

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

ezCater

1 month ago

Staff GRC Engineer (Remote)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 22 hours agoStatus: Live

Job Summary

Location: Boston

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Lead control program maturity: design and maintain an auditable control framework for ezCater’s SaaS, cloud, data, and engineering environment; define how controls are implemented, tested, evidenced, and improved with automated evidence paths.
•Build continuous control monitoring and automation: identify controls that should be near real-time, automate testing, evidence collection, validation, and recurring compliance workflows with stakeholders across Security, IT, Data, and platform teams.
•Expand data security policy and program quality: mature data security policies and handling requirements; ensure data governance is reflected in access patterns, labels, masking, retention, and evidence paths.
•Drive operational quality improvements: support day-to-day GRC operations, remediation coordination, audit readiness, and develop reusable materials for questionnaires and vendor reviews.
•Lead through influence and systems thinking: own a domain with autonomy, align stakeholders, mentor others, and raise the overall maturity of the Security Engineering & Compliance team.

Pay and Benefits

Salary: USD 165,000 - 210,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceDental401kEquityRemote WorkPaid HolidaysPaid Leave

Key Requirements

•8+ years experience in security GRC, compliance, risk, or security program work in a SaaS or cloud-native environment, with meaningful ownership of control design, testing, and program improvement.
•Strong experience with security compliance frameworks such as ISO-27001, NIST CSF, SOC 2, ITGC, and PCI-DSS, translating framework requirements into real-world controls.
•Demonstrated ability to automate or instrument parts of a compliance or assurance program via scripting, APIs, dashboards, platform configuration, or other technical approaches.
•Implementation of engineering guardrails for ensuring compliance using Policy-as-Code (Terraform) or secure configurations of cloud-hosted platforms (AWS, GitHub, etc.).
•Experience building or improving data security governance, handling rules, access design, masking, retention, and evidence paths; familiarity with AI governance is a plus.

Experience:8+ years

Skills:CommunicationCross-functional influenceProblem-solvingLeadershipMentorship

Languages:English

Tech Stack:TerraformAWSGitHubAPIsDashboardsScriptingAutomationPolicy-as-code

Company Brief

ezCater

Industry: Online Marketplaces

Company Size: Enterprise (1,001+ employees)

Growth: Established Company

Headquarters: Boston, United States

Founded: 2007

Website LinkedIn