Staff Security Engineer, GRC (Remote)

ezCater
Boston
Workplace: RemoteFull timeUSD 165,000 - 210,000 annuallyFunction: CybersecurityExperience: 8+ yearsSkills: ["Communication","Cross-functional influence","Problem-solving","Leadership","Mentorship"]

Senior, hands-on GRC engineer shaping ezCater's governance, risk, and compliance program for a SaaS/cloud environment. Build automated control frameworks, drive AI governance strategy, and partner with audit, Legal, Data, and IT to ensure scalable, reliable evidence-driven compliance across SOC 2, PCI, and SOX.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
ezCater
ezCater
3 months ago

Staff Security Engineer, GRC (Remote)

āœ“ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Senior, hands-on GRC engineer shaping ezCater's governance, risk, and compliance program for a SaaS/cloud environment. Build automated control frameworks, drive AI governance strategy, and partner with audit, Legal, Data, and IT to ensure scalable, reliable evidence-driven compliance across SOC 2, PCI, and SOX.
Location: Boston
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • ā€¢Lead control program maturity: design and maintain an auditable control framework for ezCaterā€™s SaaS, cloud, data, and engineering environment; define how controls are implemented, tested, evidenced, and improved with automated evidence paths.
  • ā€¢Build continuous control monitoring and automation: identify controls that should be near real-time, automate testing, evidence collection, validation, and recurring compliance workflows with stakeholders across Security, IT, Data, and platform teams.
  • ā€¢Expand data security policy and program quality: mature data security policies and handling requirements; ensure data governance is reflected in access patterns, labels, masking, retention, and evidence paths.
  • ā€¢Drive operational quality improvements: support day-to-day GRC operations, remediation coordination, audit readiness, and develop reusable materials for questionnaires and vendor reviews.
  • ā€¢Lead through influence and systems thinking: own a domain with autonomy, align stakeholders, mentor others, and raise the overall maturity of the Security Engineering & Compliance team.

Pay and Benefits

Salary: USD 165,000 - 210,000 annually
Equity and Bonus:Equity
Perks:Health InsuranceDental401kEquityRemote WorkPaid HolidaysPaid Leave

Key Requirements

  • ā€¢8+ years experience in security GRC, compliance, risk, or security program work in a SaaS or cloud-native environment, with meaningful ownership of control design, testing, and program improvement.
  • ā€¢Strong experience with security compliance frameworks such as ISO-27001, NIST CSF, SOC 2, ITGC, and PCI-DSS, translating framework requirements into real-world controls.
  • ā€¢Demonstrated ability to automate or instrument parts of a compliance or assurance program via scripting, APIs, dashboards, platform configuration, or other technical approaches.
  • ā€¢Implementation of engineering guardrails for ensuring compliance using Policy-as-Code (Terraform) or secure configurations of cloud-hosted platforms (AWS, GitHub, etc.).
  • ā€¢Experience building or improving data security governance, handling rules, access design, masking, retention, and evidence paths; familiarity with AI governance is a plus.
Experience:8+ years
Skills:CommunicationCross-functional influenceProblem-solvingLeadershipMentorship
Languages:English
Tech Stack:TerraformAWSGitHubAPIsDashboardsScriptingAutomationPolicy-as-code

Company Brief

ezCater
Operates an online marketplace connecting businesses with local caterers and restaurants for corporate and group catering orders, offering ordering, delivery coordination, and catering management tools.
Industry: Online Marketplaces
Company Size: Enterprise (1,001+ employees)
Growth: Established Company
Headquarters: Boston, United States
Founded: 2007
WebsiteLinkedIn