ZBD
Posted 81 days agoVerified live 2d ago
GRC Engineer
Brief overview
Remote
3+ yrsMinimum
Cybersecurity risk assessmentsThird-party/vendor risk evaluationsSecurity compliance frameworksSOC 2DORAGDPRPCI DSSSecurity solutions design and implementationSecurity governanceCloud securityApplication security assessmentsRisk managementIdentity and access managementCloud computing principlesInfrastructure as CodeTerraformOpenTofu
About the company
ZBDzbd.gg
ZBD focuses on providing secure infrastructure to power real economies in digital experiences and environments.
Job description
Summary
ZBD is building the financial operating system for the gaming economy and is seeking a GRC Engineer to design, implement, and maintain their security compliance framework and risk management programs. The role involves bridging technical security implementation with regulatory compliance and risk assessment, focusing on establishing and automating compliance activities to support business goals.
Responsibilities
- Conduct cybersecurity risk assessments, including third-party/vendor risk evaluations, with an emphasis on consistency, repeatability, and scalability
- Proactively identify and address security & policy gaps in existing systems and architectures, recommending and implementing enhancements to strengthen ZBD’s overall security posture
- Bring and keep ZBD systems, processes, and procedures into compliance with relevant compliance frameworks (SOC 2, DORA, GDPR, PCI DSS, etc.)
- Design, implement, and maintain security solutions to address vulnerabilities and risks within ZBD systems
- Work closely with the software engineers and developers to establish and keep a strong security compliance posture
- Develop and enforce technical security standards, patterns, and best practices to establish and maintain a consistent and robust security posture across ZBD systems
- Contribute to the development and maintenance of security documentation, including policies, procedures, and technical guides
- Develop and maintain cloud recovery and backup solutions to ensure availability and business continuity
- Apply the most appropriate technical approach based on problem complexity and process maturity
- Participate in an On-Call rotation
- Document processes & procedures
Skills
- 3+ years of experience in security governance, cloud and application security assessments, risk management, and/or third party risk
- Thorough understanding of cybersecurity principles, cloud security, and identity and access management
- Firm grasp on cloud computing principles
- Demonstrated experience with Infrastructure as Code using Terraform/OpenTofu
- Working knowledge of Linux
- Experience with metrics gathering, alerting, reporting
- Experience with git, GitLab, and CI/CD pipelines
- Ability to design, implement, and improve cybersecurity solutions
- Ability to balance cybersecurity initiatives with business initiatives
- Ability to identify and analyze potential methods of attack
- Experience with AWS Organizations and Multi Accounts
- Experience as a software engineer
- Experience with SOC 2 compliance efforts
- Knowledge of, and experience working with Bitcoin and Lightning Network software
Qualifications
Must Haves
- 3+ years of experience in security governance, cloud and application security assessments, risk management, and/or third party risk
- Thorough understanding of cybersecurity principles, cloud security, and identity and access management
- Firm grasp on cloud computing principles
- Demonstrated experience with Infrastructure as Code using Terraform/OpenTofu
- Working knowledge of Linux
- Experience with metrics gathering, alerting, reporting
- Experience with git, GitLab, and CI/CD pipelines
- Ability to design, implement, and improve cybersecurity solutions
- Ability to balance cybersecurity initiatives with business initiatives
- Ability to identify and analyze potential methods of attack
Nice to Haves
- Experience with AWS Organizations and Multi Accounts
- Experience as a software engineer
- Experience with SOC 2 compliance efforts
- Knowledge of, and experience working with Bitcoin and Lightning Network software
Benefits
- Fully remote workplace
