Q
Hiring companyQualys
Verified today
Senior GRC Engineer
Pune,IN,India Full-time On-site
About the role
Qualys Security TechServices team builds and scales security governance, risk, and compliance frameworks for enterprise customers. The Senior GRC Engineer designs control libraries, maps NIST and ISO standards, and automates evidence collection pipelines to drive audit readiness. Pune, India, on-site role focusing on compliance automation and risk management.
What you’ll do
- Design and maintain scalable control libraries
- Translate regulatory standards into actionable control definitions
- Define evidence modeling and validation logic
- Collaborate with engineering to build automated evidence collection pipelines
- Provide guidance for audit preparation and continuous compliance monitoring
- Continuously improve GRC workflows and tooling
What you’ll bring
- Hands‑on ISO 27001/27002 implementation
- NIST CSF/SP 800‑53/RMF implementation
- Audit readiness and evidence management experience
- Risk management expertise with ISO/NIST frameworks
- Cloud platform knowledge (AWS, Azure, GCP)
- Identity & Access Management (IAM) familiarity
- Experience with JSON/YAML for control metadata
- Automation of compliance evidence pipelines
Skills
Risk ManagementCompliance AutomationFramework MappingCloud SecurityIAMJSONYAML