Senior GRC Engineer

Docker2 weeks ago

Location

Canada

Workplace

Remote

Type

Full Time

Salary

USD 147,200 – 184,000

Level

Senior

Role

Security Engineer

Posted

Mar 2, 2026

Full TimeRemoteSenior

The role

Summary

Docker is seeking a Senior GRC Engineer to drive governance, risk, and compliance initiatives by developing automated solutions and strategic frameworks. The ideal candidate will leverage programming expertise to streamline compliance processes, integrate security controls, and support Docker's robust security infrastructure across engineering and product teams.

What you'll do

GRC Automation: Design and develop automated workflows to streamline compliance monitoring, controls, reporting, and risk assessments

Security Platform Implementation: Implement and customize GRC platforms using programming languages and APIs to enhance security monitoring and control

Risk Management: Monitor, assess, and mitigate organizational risks using automated systems and data-driven insights

Compliance Documentation: Draft and maintain corporate Information Security policies, departmental procedures, and map them to relevant control standards

Audit Support: Support internal and external audits by providing automated solutions for data collection and evidence generation

What we look for

Technical

Programming LanguagesProficiency in Python and Golang for scripting and automation

Cloud PlatformsHands-on experience with AWS, Azure, or Google Cloud compliance automation tools

Security ToolsFamiliarity with SIEM, vulnerability management, data loss prevention, and endpoint protection technologies

Education

Cybersecurity DegreeBachelor's degree in Computer Science, Information Security, or related technical field preferred

Experience

GRC Engineering6-8 years of experience in Information Technology, Security Engineering, Governance, Risk and Compliance

Skills

Required skills

DevSecOpsExperience integrating security compliance into CI/CD pipelines

Compliance FrameworksIn-depth knowledge of security framework controls for cloud and SaaS environments

Regulatory StandardsUnderstanding of GDPR, ISO 27xxx, SOC 2, and other compliance standards

Nice to have

CertificationsCISSP, CISA, CRISC professional certifications

Incident ResponseExperience in security incident response and on-call rotations

Compensation & benefits

Salary

USD 147,200 – 184,000 (annual)

Stock options

Available

Benefits

Remote Work

Flexible, remote-first work culture with global team collaboration

Professional Development

Training stipend for conferences, courses, and professional classes

Equity

Stock options to share in the company's growth and success

Home Office Support

Technology stipend and home office setup budget

Parental Leave

16 weeks of paid parental leave

Interview process

1
Initial Screening — HR phone screen to assess basic qualifications and role fit
2
Technical Interview — Detailed discussion of GRC engineering experience and technical skills
3
Security Assessment Challenge — Practical assessment of compliance and security automation skills
4
Leadership Interview — Meeting with security and engineering leadership to evaluate strategic alignment
5
Final Interview — Comprehensive review and discussion of role expectations and candidate fit