G

Genesys

Cloud-based contact center software platform

Lead Engineer Product GRC - Technical Compliance & Automation

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeNo salary listed

About the Job

Requirements

  • A bachelor's or master's degree in Information Security, Risk Management, Computer Science, or a related field.
  • 8–12 years of experience in information security, GRC, or product/technology compliance, including hands-on experience running GRC programs in SaaS or technology environments.
  • Hands-on experience designing and operating compliance programs for SaaS or multi-tenant technology platforms.
  • A solid understanding of security and risk concepts, including access management, data protection, and encryption standards.
  • Hands-on experience with GRC platforms and compliance tools.
  • Familiarity with automation and scripting concepts is a plus but not required.
  • General familiarity with modern DevOps/DevSecOps practices is a plus; deep tooling expertise is not required.
  • Strong communication and stakeholder-management skills.
  • Ability to translate compliance requirements into technical reality and influence cross-functionally without direct authority.

Responsibilities

  • Proactively evaluate and advise the business on new and evolving certification programs, regulatory requirements, and technologies.
  • Own the GRC roadmap for SaaS operations, aligning with frameworks, standards, and regulatory requirements including SOC 2, ISO 27001, ISO 42001, NIST CSF, HIPAA, HITRUST, ENS, HDS, and GDPR.
  • Design and implement scalable compliance workflows and processes for cloud and product operations.
  • Collaborate with Legal, Privacy, and Security Engineering to ensure controls support regulatory, contractual, and data privacy requirements.
  • Develop and maintain policies, standards, and risk frameworks that reflect business needs and evolving threat landscapes.
  • Automate evidence collection, control testing, and compliance monitoring using GRC and workflow management tools.
  • Work with engineering and product teams to embed compliance checks into the software development lifecycle, applying policy-as-code where appropriate.
  • Validate compliance of product and cloud architecture, access management, data protection, and logging controls.
  • Build and maintain dashboards and key performance indicators for continuous visibility into compliance posture.
  • Conduct and automate risk assessments, control effectiveness reviews, and technical remediation tracking.
  • Implement and manage continuous control monitoring for real-time risk identification.
  • Collaborate with product and engineering teams to perform technical risk reviews during product design and deployment.
  • Serve as the technical subject matter expert for external audits and certification processes, including SOC 2, ISO 27001, PCI-DSS, HIPAA, HDS, ENS, and ISO 42001.
  • Manage audit evidence preparation, ensuring traceability from policies to controls and technical implementation.
  • Lead post-audit reviews and ensure timely closure of findings.
  • Mentor junior GRC and security analysts on automation tools and control implementation best practices.
  • Partner with engineering and product teams to promote a culture of compliance and risk awareness.
  • Collaborate with privacy and data protection officers on compliance alignment.

Desired Qualifications

  • CISSP, CISM, CRISC, or CISA certification.
  • ISO 27001 Lead Auditor or Lead Implementer certification.
  • Cloud certifications such as AWS Certified Security – Specialty, Azure Security Engineer Associate, or CCSP.
  • Familiarity with Python is a plus but not required.

About the Company

Genesys

Cloud-based contact center software platform

Genesys provides customer experience and contact center software. Its core product, Genesys Cloud CX, is a cloud-native platform for handling customer interactions across voice, messaging, email, chat, and social channels, with built-in AI for self-service, agent assistance, and journey orchestration. It also offers Genesys Cloud EX for workforce engagement and Multicloud CX and PureConnect for private cloud or on‑premises deployments, plus a marketplace called AppFoundry with hundreds of integrations. The company aims to help organizations deliver consistent, efficient customer experiences by routing interactions intelligently, automating self-service, and supporting agents across omnichannel channels at scale.

Company size
5,001-10,000
Company stage
Debt Financing
Total funding
$2.6B
Headquarters
Menlo Park, CA
Founded
2000

Recently Posted Jobs

Explore more opportunities at Genesys

See more jobs