GRC Engineer

NinjaTrader

Illinois, United StatesPosted 12d ago

Apply to this job with Jobbie

Jobbie fills out the application and submits it for you — no forms, no cover letters, no retyping your resume.

Job description

<div class="content-intro"><hr> Disclaimer: Please be advised that the most accurate and up-to-date information about our open roles—including job descriptions, compensation, and benefits—can only be guaranteed on our official job board. For the latest listings and details, please visit: <a href="https://job-boards.greenhouse.io/ninjatrader">https://job-boards.greenhouse.io/ninjatrader</a>. <hr> JOIN US ON OUR MISSION TO BECOME THE #1 RETAIL TRADING PLATFORM IN THE WORLD Welcome to the dynamic world of NinjaTrader! As an industry-leading trading platform and futures broker, we're empowering traders to take control of their financial destiny. How do we do it? We provide cutting-edge products and services that enhance the trading journey. Whether a seasoned pro or just starting out, NinjaTrader equips traders with award-winning software and brokerage services to navigate the world's leading financial markets with confidence.   Our growth story is nothing short of exhilarating. Since 2003, NinjaTrader has been dedicated to understanding and supporting traders on their journey toward trading triumph. Through those efforts, our user base has grown to over 2 million users and we have become the number one rated futures brokerage worldwide.  But we're not stopping there. We're constantly evolving, pushing boundaries, and modernizing the futures industry. Our commitment to innovation means users will always have access to dynamic tools, real-time support, and a community of like-minded traders.   So, why work at NinjaTrader? Here, you're not just part of a team; you're part of a movement. We empower employees to reach new heights in their careers by providing a dynamic culture focused on social connection, professional development, and employee recognition initiatives. Sounds too good to be true? <a href="https://www.greatplacetowork.com/certified-company/7025362">Take it from our employees.</a>  Join us as we redefine what's possible in trading, advocate for our customers, and continue our journey toward becoming the world's top retail-focused trading platform in the world.  </div><h2>What you'll do:</h2> We're looking for a mid-level GRC Engineer to help us scale our compliance program through automation and run audits across SOC 2, ISO 27001, and SOX. This is a hands-on, technical role where you'll spend as much time writing code and integrating systems as you do reviewing controls. You'll serve as the bridge between Security, Engineering, and the business by transforming manual, evidence-heavy compliance work into automated, repeatable processes while helping leadership understand and prioritize risk. This role is ideal for someone with GRC or security experience who wants to move beyond spreadsheets and checklists into building the tooling that makes a compliance program efficient, scalable, and audit-ready year-round. In this role you will: Automation & Tooling <ul> <li>Build and maintain automation for continuous control monitoring, evidence collection, and audit readiness through scripts, APIs, and GRC platform integrations</li> <li>Integrate compliance workflows with cloud providers, identity systems, ticketing platforms, and CI/CD pipelines to automatically collect control data and evidence</li> <li>Reduce manual compliance work by codifying control checks and pulling evidence directly from source systems</li> <li>Develop dashboards and reporting that provide stakeholders with real-time visibility into control health and audit readiness</li> </ul> Audits & Frameworks <ul> <li>Run and coordinate audits for SOC 2 (Type I and Type II), ISO 27001, and SOX, including scoping, evidence collection, control walkthroughs, and auditor coordination</li> <li>Map controls across multiple compliance frameworks to reduce duplication and maintain a unified control library</li> <li>Track audit findings and control gaps through remediation and closure with business and technical stakeholders</li> <li>Maintain audit-ready documentation including policies, procedures, control narratives, and evidence repositories</li> </ul> Risk Management <ul> <li>Identify, assess, and document organizational risks while maintaining the enterprise risk register</li> <li>Support risk assessments, including likelihood and impact scoring, treatment planning, and remediation tracking</li> <li>Partner with Engineering and IT to evaluate the control impact of new systems, vendors, and architectural changes</li> <li>Contribute to the third-party risk management program</li> </ul> Cross-Functional Partnership <ul> <li>Partner with control owners to ensure controls are operating effectively and generating appropriate evidence</li> <li>Translate compliance requirements into practical, engineering-focused guidance</li> <li>Support customer security questionnaires, trust requests, and due diligence activities</li> </ul> <h2>What you'll need:</h2> <ul> <li>3–5 years of experience in GRC, IT audit, security compliance, or a related field</li> <li>Hands-on experience supporting or leading audits for SOC 2, ISO 27001, SOX, or a comparable framework</li> <li>Working knowledge of SOC 2 Trust Services Criteria, ISO 27001 Annex A, COSO/SOX ITGCs, NIST, or similar control frameworks</li> <li>Experience with scripting and automation using Python or a similar language, including working with REST APIs to automate evidence collection</li> <li>Familiarity with at least one major cloud platform (AWS, GCP, or Azure) and its security and logging services</li> <li>Strong understanding of access management, change management, logging and monitoring, vulnerability management, and SDLC controls</li> <li>Excellent written communication skill

Ready to apply?

Create your free Jobbie profile once — we apply to this job and hundreds like it for you.

GRC Engineer

Apply to this job with Jobbie

Job description

Ready to apply?

Similar jobs

Staff+ Software Engineer, GRC Platform

Managing Engineer - Fusion GRC Platform

Product Engineer - Fusion GRC Platform

Senior Security Engineer, GRC

Principal Solution Engineer (GRC)

Principal Security Engineer – GRC Team Lead (Remote Eligible)