gainsight - GRC Engineer
Requirements
• 5+ years of experience in GRC, security compliance, IT audit, or risk management, ideally within a SaaS or cloud-based company. • Working knowledge of security and compliance frameworks such as SOC 2, ISO 27001, and NIST, including how to map controls across them. • Experience supporting external audits and assessments, including scoping, evidence collection, walkthroughs, and tracking findings through remediation. • Experience performing risk assessments, maintaining a risk register, and reviewing the security posture of third-party vendors. • Familiarity with compliance automation or GRC tools, and experience implementing security automation, such as scripting or workflow tools that automate recurring evidence collection and control monitoring. • Understanding of cloud infrastructure and common security controls (access management, logging, encryption, change management) sufficient to evaluate evidence and discuss it with engineers. • Clear written and verbal communication, with the ability to explain control requirements and risk to technical and non-technical teams and to manage several deadlines at once. • Experience with AI Governance frameworks. • Previous experience with highly regulated industries that require HIPAA or FedRamp. • Experience working with globally distributed teams. • Security certifications such as CISA, CRISC, or Security+ certifications.
Responsibilities
• Maintain multiple control frameworks and map controls to standards • Track control ownership and health • Meet with control owners to address gaps in controls • Scope audits for both internal and external audits • Work with auditors through the audit process from kick-off to completion • Collect and review evidence for all frameworks to ensure compliance and traceability • Track audit findings and remediations to completion • Perform security reviews of all Third-Parties and Vendors • Track vendor remediation items and maintain the vendor inventory • Draft, update, and maintain all security policies, procedures, and standards regularly • Answer customer security questionnaires and requests • Support customer audits and provide compliance documentation where required • Manage the risk register including exceptions, acceptance, expiry • Build and maintain integrations and automation for evidence collection and control monitoring • Work with engineering teams to align technical controls to business requirements
Benefits
• Gainsight is a place where innovation is shaped through collaboration, curiosity, and a shared focus on solving real-world problems. With a growing suite of products across customer success, product experience, community, education, and AI-powered relationship intelligence, we continue to evolve with the needs of our customers. When people with diverse strengths, a strong sense of community, and true passion for our mission come together, they drive greater impact and create lasting value. What underpins it all is a culture that offers the stability, trust, and support that people need - not just to do the job, but to show up as themselves and feel connected to the work they do. Gainsters love working here for several reasons. Here are a few: • Our Core Values: We are guided by our values and our mission to be living proof you can win in business while being Human-First. Learn more here https://www.gainsight.com/company/. • Our Growth Opportunities: From mentoring to career development opportunities, we’re passionate about helping our teammates learn, grow, and thrive. • Our Parody Videos: No explanation needed. Just watch them here! https://www.youtube.com/playlist?list=PLB2Z_xLbXPiAcvQr28ggP2CndoSu29zq_ • If this sounds like the right role for you, we’d love to hear from you. • Additional Information:
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT