← All roles

Senior Security GRC Engineer

Mozilla· Infrastructure
Apply on company site
Remote£66k - £87kFull-timePosted 2mo ago

About the role

Role within Mozilla's Security Function to define and implement a Governance, Risk and Compliance (GRC) framework across Enterprise and Product verticals, integrating security, privacy, regulatory, and risk management initiatives.

Responsibilities

  • Risk Management: Perform risk assessments and intake, maintain risk register, track risk treatment plans, manage exceptions and issues, support third-party risk activities (vendor assessments, questionnaire review, remediation tracking)
  • Compliance and Audit: Coordinate evidence collection, prepare for audit interviews, maintain SOC 2 system description, ISMS documentation, and SoA, track audit gaps and drive remediation
  • Security Program Support: Manage SSDLC governance, data classification/governance, BIA/BC-DR activities, track vulnerability metrics and remediation, coordinate penetration testing engagements from scoping to remediation
  • GRC Operations and Tooling: Administer GRC platform (users/workflows/integrations/reporting), streamline processes, automate repetitive GRC tasks, maintain policies and documentation

Qualifications

  • Experience in cybersecurity, GRC, IT audit, or related field (typically 2-4 years)
  • Working knowledge of security and compliance frameworks (SOC 2, ISO 27001, or NIST)
  • Familiarity with risk assessment concepts and risk management lifecycle
  • Strong organization, multi-workstream management, and follow-through
  • Clear written and verbal communication, ability to work with technical and non-technical stakeholders
  • Collaborative, curious mindset and willingness to learn
  • Hands-on experience with a GRC platform (e.g., Vanta, Drata, OneTrust, ServiceNow GRC)
  • Experience supporting audits (SOC 2, ISO 27001, or similar)
  • Exposure to vulnerability management, third-party risk, BC/DR, secure development practices, or penetration test coordination
  • Scripting/automation skills (e.g., Python, SQL, workflow tools) to improve GRC processes
  • Relevant certification or in-progress (e.g., Security+, CISA, CISM, CISSP)

Skills

Required:GRC platform administrationRisk assessment and managementAudit support
Nice to have:SSDLC governanceData classification and governanceScripting/automation

Benefits

  • Generous performance-based bonus plans
  • Medical, dental, and vision coverage
  • Retirement contributions with 100% immediate vesting
  • Quarterly all-company wellness days
  • Country-specific holidays plus birthday day off
  • One-time home office stipend
  • Annual professional development budget
  • Quarterly well-being stipend
  • Parental leave
  • Employee referral bonus program
  • Life/AD&D, disability, EAP, and other country-specific benefits
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Mozilla

Internet for people, not profit

Mozilla is the not-for-profit behind the lightning fast Firefox browser. We put people over profit to give everyone more power online.

BrowserInternetNot-for-profitFirefox
Company profileWebsite

More open roles at Mozilla