[Hiring] Lead Engineer - Product GRC @Genesys

Role Description

As the Lead Engineer– Product GRC, you will be a key member of the GRC working closely with the Information Security and Privacy team responsible for driving governance, risk, and compliance (GRC) programs across our product and cloud environments, applying industry best practices.

You’ll act as the bridge between security, engineering, product, and legal/privacy teams, ensuring that governance controls and risk management practices are seamlessly embedded into how the company builds, operates, and delivers its products.

This role suits an experienced GRC professional with solid, hands-on experience running compliance and risk programs, who can translate regulatory and framework requirements into practical, scalable controls grounded in industry best practices.

Qualifications

• Bachelor’s or Master’s degree in Information Security, Risk Management, Computer Science, or a related field.
• 8–12 years of experience in information security, GRC, or product/technology compliance, with solid hands-on experience running GRC programs in SaaS or technology environments.
• Proven, hands-on experience designing and operating compliance programs aligned with industry best practices for SaaS or multi-tenant technology platforms.
• Certifications (Preferred): CISSP, CISM, CRISC, or CISA; ISO 27001 Lead Auditor/Implementer; Cloud certifications such as AWS Certified Security – Specialty, Azure Security Engineer Associate, or CCSP are highly preferred.
• Solid understanding of security and risk concepts, including access management, data protection, and encryption standards.
• Familiarity with automation and scripting concepts (e.g., Python) is a plus but not required.
• General familiarity with modern DevOps/DevSecOps practices is a plus, though deep tooling expertise is not required.
• Hands-on experience with GRC platforms and compliance tools, applied per industry best practices.
• Strong communication and stakeholder management skills.
• Analytical thinker with the ability to translate compliance requirements into technical reality.
• Influencer who can lead without direct authority in a cross-functional setting.

Requirements

• Proactively evaluate and advise the business on new and evolving certification programs, regulatory requirements, and technologies.
• Own the GRC roadmap for SaaS operations, aligning with frameworks and standards and regulatory requirements like SOC 2, ISO 27001, ISO 42001, NIST CSF, HIPAA, HITRUST, ENS, HDS, GDPR etc.
• Design and implement scalable compliance workflows and processes that support cloud and product operations, in line with industry best practices.
• Collaborate with Legal, Privacy, and Security Engineering to ensure controls support regulatory, contractual, and data privacy requirements.
• Develop and maintain policies, standards, and risk frameworks that reflect both business needs and evolving threat landscapes.
• Lead the automation of evidence collection, control testing, and compliance monitoring using GRC and workflow management tools.
• Work with engineering and product teams to embed compliance checks into the software development lifecycle, applying policy-as-code and other industry best practices where appropriate.
• Conduct compliance validation of product and cloud architecture, access management, data protection, and logging controls.
• Build and maintain dashboards and KPIs for continuous visibility into compliance posture.
• Conduct and automate risk assessments, control effectiveness reviews, and technical remediation tracking.
• Implement and manage continuous control monitoring (CCM) for real-time risk identification.
• Collaborate with product and engineering teams to perform technical risk reviews during product design and deployment.
• Serve as the technical SME for external audits and certification processes (SOC 2, ISO 27001, PCI-DSS, HIPAA, HDS, ENS, ISO 42001 etc.).
• Manage audit evidence preparation, ensuring traceability from policies to controls and technical implementation.
• Lead post-audit reviews and ensure timely closure of findings.
• Mentor junior GRC and security analysts on automation tools and control implementation best practices.
• Partner with engineering and product teams to drive a strong culture of compliance and risk awareness.
• Collaborate closely with privacy and data protection officers on compliance alignment.

Benefits

• Stability of a multinational company and the flexibility/speed of a startup company.
• The warmest of welcomes: we will make sure you feel part of the Genesys team from day 1.
• Complete support and transparency from our global/local leaders.
• Talented and experienced professionals you can grow professionally with.
• An open & inclusive community.
• Career development support for your professional growth.
• Flexibility for office-based, remote workers long term, or a mix of both, but Hungary based.
• Your well-being is our priority with extra days off in August and October, and extra time off to volunteer.
• Cafeteria, health insurance, life insurance, learning center, language courses, gym, vitamin bar, company cafe with our own barista.
• A fabulous new HQ near Nyugati Railway Station in Budapest.