GRC Engineer

What You’ll Do

• Set the success contract upfront. In every new engagement, establish explicit, measurable goals with the customer before work begins — and align the entire implementation plan to hitting those milestones.
• Own implementations end-to-end and close them. Lead onboarding and deployment for enterprise customers from scoping and configuration through to a defined, celebrated go-live.
• Be the GRC expert in the room. Serve as the primary compliance authority in all customer conversations.
• Transition to steady state and monitor. Once a customer has hit their success goals, transition them to a lightweight monitoring cadence.
• Drive product feedback. Synthesize what you hear across implementations into structured, prioritized product insights.
• Build the implementation playbook. Define how Zania implementations work at scale — the processes, templates, success metrics, and handoff criteria.
• Support pre-sales. Partner with the sales team on technical discovery and proof-of-concept engagements for strategic prospects.

What You Have

• 3–8 years of experience spanning GRC, information security compliance, risk management, audit, or customer success in an enterprise technology context.
• Framework fluency. Deep working knowledge of at least two major compliance frameworks (SOC 2, ISO 27001, NIST CSF, FedRAMP, HIPAA, PCI-DSS, or similar).
• A closer’s instinct. You define success before you start, drive engagements toward it with urgency, and know how to bring a customer to a clear finish line.
• Customer-facing experience. Comfortable owning relationships with senior security and risk stakeholders.
• Outcome orientation. Measure success against specific, agreed-upon goals.
• Product instinct. Document friction and ensure the product team hears about it.
• Strong communication. Run technical workshops with a customer’s GRC team and write clear, structured product briefs.

Minimum Qualifications

• Bachelor’s degree in Information Security, Business, Risk Management, or a related field, or equivalent practical experience.
• 3–8 years of experience in GRC, information security compliance, risk management, audit, enterprise technology customer success, or a customer success manager role — ideally in a SaaS or technical product environment.
• Working knowledge of at least two major compliance frameworks (e.g., SOC 2, ISO 27001, NIST CSF, FedRAMP, HIPAA, or PCI-DSS).
• Demonstrated ability to project manage complex, multi-stakeholder enterprise engagements.
• Strong written and verbal communication skills.

Compensation & Benefits

• Competitive salary + significant equity
• Flexible PTO
• Medical, dental, and vision insurance
• Meals and snacks in the office
• Relocation and immigration support