Remote
GRC Engineer
About this role
We’re building the AI-driven future of customer success, from retention to growth! We’re building the AI-driven future of customer success, from retention to growth! Gainsight is the AI-powered retention engine behind the world’s most customer-centric companies. The Gainsight CustomerOS platform orchestrates the customer journey from onboarding to outcomes to advocacy. More than 2,000 companies trust Gainsight’s applications and AI agents to drive learning, adoption, community connection, and success for their customers.
To explore how our suite of solutions is shaping the future of customer success, check out the link https://www.gainsight.com. About This Role: We’re looking for a full-time GRC Engineer to join our Security team reporting to the Director of Security. This role is a remote role based in Mexico. In this role, you'll play a key role in maintaining Gainsight's governance, risk, and compliance program and keeping the company audit-ready by maintaining control frameworks, supporting internal and external audits, assessing third-party risk, and automating evidence collection.
This is a great opportunity for someone who thrives in a detail-oriented, SaaS and cloud-based environment and enjoys working cross-functionally with teams like Security, Engineering, IT, and Legal. The ideal candidate brings strong skills in GRC frameworks (SOC 2, ISO 27001, NIST), audit and risk management, and clear communication. What You'll Do: - Maintain multiple control frameworks and map controls to standards - Track control ownership and health - Meet with control owners to address gaps in controls - Scope audits for both internal and external audits - Work with auditors through the audit process from kick-off to completion - Collect and review evidence for all frameworks to ensure compliance and traceability - Track audit findings and remediations to completion - Perform security reviews of all Third-Parties and Vendors - Track vendor remediation items and maintain the vendor inventory - Draft, update, and maintain all security policies, procedures, and standards regularly - Answer customer security questionnaires and requests - Support customer audits and provide compliance documentation where required - Manage the risk register including exceptions, acceptance, expiry - Build and maintain integrations and automation for evidence collection and control monitoring - Work with engineering teams to align technical controls to business requirements This role may require occasional travel (up to 10-25%) for team meetings, training, or company events.