{"id":3549918,"url":"https://alion.io/job/tractian-grc-engineer","title":"GRC Engineer","company":{"id":48244,"name":"TRACTIAN","domain":"tractian.com","url":"https://alion.io/company/tractian","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Gem","truth_index":{"grade":"A","score":91,"open_postings":63,"ghost_share":0.063,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":97,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["BR"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"SOC 2","optional":false},{"name":"AI Agents","optional":true},{"name":"AWS","optional":true},{"name":"CI/CD","optional":true},{"name":"FedRAMP","optional":true},{"name":"GCP","optional":true},{"name":"Git","optional":true},{"name":"ISO 42001","optional":true},{"name":"NIST CSF","optional":true}],"status":"live","first_seen_at":"2026-10-30T19:15:27Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-10-31T06:25:49Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":0},"description":"GRC Engineer\nAs a GRC Engineer, you will be part of our Governance, Risk, and Compliance (GRC) team, contributing to the development, implementation, and continuous improvement of our security governance, risk management, and compliance programs. You will collaborate with technical and business teams to strengthen security controls, manage risks, and support compliance with industry standards. We are looking for an experienced, hands-on, and versatile professional with strong GRC expertise and a technical mindset. You will work alongside the team to drive initiatives across multiple GRC domains, leveraging Artificial Intelligence (AI), automation, and emerging technologies to build scalable and efficient processes.\nKey Responsibilities\nDevelop, implement, and continuously improve information security governance, risk management, compliance, and assurance processes.\nSupport compliance with frameworks and standards such as ISO 27001, ISO 27002, SOC 2, and other applicable requirements.\nConduct risk assessments, evaluate security controls, maintain risk registers, and coordinate risk treatment and remediation activities.\nSupport internal and external audits, certification processes, evidence collection, and continuous compliance monitoring.\nDevelop and maintain security policies, standards, procedures, and governance documentation.\nImprove Business Continuity Management (BCM), Disaster Recovery (DR), Incident Response (IR), and Third-Party Risk Management (TPRM) activities, including gap analysis, planning, exercises, and testing.\nAssess secure software development practices and collaborate with Engineering teams to integrate security and compliance requirements into the Software Development Lifecycle (SDLC).\nConduct customer security and compliance due diligence, including security questionnaires, RFPs, and contractual security assessments.\nIdentify and implement opportunities to automate GRC processes using AI, APIs, integrations, and other technologies.\nCollaborate with Engineering, Infrastructure, Security, Product, and business teams to integrate security and compliance requirements into operational and technical processes.\nRequirements\nBackground in Information Technology, Information Security, GRC, Internal Audit, Compliance, or related fields.\nProven hands-on experience implementing or improving information security governance, risk management, and compliance programs.\nExperience with ISO 27001 / ISO 27002, SOC 2, or equivalent security frameworks.\nProven hands-on experience in Information Security Risk Management, including risk assessments, risk treatment, control evaluation, and remediation management.\nPractical experience implementing or maintaining Business Continuity Management (BCM) and Disaster Recovery (DR) processes, including BIA, RTO/RPO, recovery planning, and testing.\nHands-on experience with Incident Response (IR) processes, including incident management, response procedures, exercises, and post-incident improvement.\nExperience conducting Third-Party Risk Management (TPRM) assessments, evaluating vendor security controls, and managing associated risks.\nKnowledge of data protection and privacy requirements, including LGPD and GDPR.\nUnderstanding of assessing Secure Software Development practices, including SDLC security controls, code review processes, vulnerability management, etc.\nUnderstanding of cloud infrastructure concepts, identity and access management, and cybersecurity concepts.\nExperience supporting internal or external audits, compliance assessments, and evidence management.\nAbility to independently assess risks, evaluate controls, and drive improvements across different GRC domains.\nAbility to leverage AI, automation tools to improve workflows, solve problems, and increase operational efficiency.\nAdvanced Portuguese and English proficiency.\nNice to Have\nExperience with GRC platforms (e.g., Vanta, Drata).\nExperience with Policy-as-Code or Compliance-as-Code\nFamiliarity with cloud environments (AWS, OCI, GCP), Infrastructure as Code (IaC), CI/CD pipelines, and Git-based workflows.\nExperience building AI-assisted workflows or using LLMs and AI agents to automate GRC activities.\nKnowledge of additional frameworks such as ISO 22301, ISO 27701, ISO 42001, NIST CSF, or FedRAMP.\nMarket-recognized security, risk management, or compliance certifications.\nCompensation & Benefits\nCompetitive Compensation\n30 days of paid annual leave\nEducation and courses stipend\nEarn a trip anywhere in the world every 4 years\nR$1.035/month for meals allowance\nHealth plan with national coverage and without coparticipation\nDental Insurance: we help you with dental treatment for a better quality of life.\nWellhub Membership: Access a wide range of gyms and training programs.","description_format":"text","description_chars":4762,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Portuguese","level":"Advanced (C1)","optional":false},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Annual leave","Dental insurance"],"hiring_locations":[{"name":"Brazil","iso":"BR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Sensors & Transducers","Industrial IoT (IIoT)","Maintenance, Repair & Operations (MRO)","Industrial AI"],"lifecycle":[{"event":"open","at":"2026-10-30T22:17:25Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":97,"reasons":["conf:3","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/tractian-grc-engineer","json_url":"https://alion.io/job/tractian-grc-engineer.json","meta":{"generated_at":"2026-10-31T08:42:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13043,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":48244},"rest":"https://alion.io/mcp/rest/get_company?id=48244"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftractian-grc-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftractian-grc-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftractian-grc-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tractian-grc-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftractian-grc-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3549918}},{"tool":"search_jobs","arguments":{"company":"tractian.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3549918},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}