As a Senior Security GRC Engineer at Instabug, you will be responsible for leading and optimizing the organization’s Security Governance, Risk, and Compliance (GRC) program. This role encompasses conducting risk assessments, developing and implementing risk mitigation strategies, and managing remediation plans. You will oversee threat modeling, internal audits, vulnerability assessments, and compliance initiatives related to SOC 2 Type II, ISO 27001, and PCI-DSS standards. Additionally, you will manage governance processes for change, asset, and configuration management to ensure robust security and compliance practices. Serving as a critical interface, you will respond to customer inquiries and third-party risk management (TPRM) audits, including addressing questionnaires and surveys. You will also design and deliver security awareness programs and conduct security training for internal stakeholders. The role extends to assessing the security posture of Instabug’s vendors and ensuring alignment with the company’s security standards.
 

Job Responsibilities:

• Risk Management:
  • Conduct comprehensive risk assessments and develop actionable risk mitigation strategies.
  • Monitor and follow up on remediation plans to address identified vulnerabilities and risks
  • Perform threat modeling to identify potential security weaknesses and improve system design.
• Compliance and Governance:
  • Lead and execute internal audits to ensure adherence to SOC 2 Type II, ISO 27001, and PCI-DSS compliance standards.
  • Oversee governance processes for change, asset, and configuration management to align with security best practices.
  • Administer and maintain the organization’s compliance with applicable regulatory and industry standards.
     
• Vulnerability Management:
  • Conduct vulnerability assessments and oversee the vulnerability management lifecycle.
• Customer and Third-Party Engagement:
  • Respond to third-party risk management (TPRM) surveys, questionnaires, and audits.
  • Collaborate and engage with customers to address security inquiries and ensure satisfaction with Instabug’s security posture.