[Hiring] Security Engineer @1Password

Role Description

As a Security Engineer on the Governance, Risk, and Compliance (GRC) team, you’ll help build and scale programs that support commercial audits, federal compliance, security risk management, vendor risk, policy management, and customer trust. You’ll turn complex requirements into practical controls, reliable workflows, and measurable improvements while partnering across Security, Engineering, Legal, Privacy, and other teams. Your work will help 1Password protect the people, businesses, and digital experiences that depend on secure access every day.

Qualifications

• Three or more years of experience in security, compliance, risk, audit, GRC, program management, or a related technical discipline.
• Experience managing moderately complex, cross-functional compliance or security initiatives with a high degree of organization, ownership, and follow-through.
• Familiarity with one or more security or compliance frameworks, such as SOC 2, ISO 27001, NIST 800-53, CMMC, FedRAMP, PCI DSS, or similar standards.
• Support experience in FedRAMP or comparable federal compliance programs, ideally in a program management, project management, or cross-functional coordination capacity.
• Ability to translate framework requirements into clear control activities, policies, procedures, test cases, evidence requirements, and operational workflows.
• Experience working with GRC platforms such as Drata, Tines, Vanta, ServiceNow, Archer, LogicGate, Secureframe, or comparable tools.
• Active use of AI in day-to-day work and a clear trajectory toward building with it.

Requirements

• Manage GRC initiatives spanning commercial compliance, federal compliance, security risk, vendor risk, policy management, and customer trust.
• Support planning, assessment preparation, remediation, and continuous monitoring activities for FedRAMP, CMMC, NIST 800-53, and related programs.
• Partner with control owners, Security, Engineering, Legal, Privacy, auditors, assessors, and business stakeholders to gather evidence, track actions, and resolve gaps.
• Define and improve how evidence is generated, validated, mapped to requirements, stored, and traced to its source.
• Monitor control health, evidence freshness, configuration drift, exceptions, and remediation progress.
• Build or configure automated and AI-assisted workflows that reduce manual effort and improve the reliability of compliance and risk processes.
• Maintain project plans, action trackers, risk logs, documentation, and status updates while contributing to repeatable team practices and knowledge sharing.

Benefits

• Health and wellbeing programs including maternity and parental leave top-up.
• Competitive health benefits.
• Generous PTO policy.
• RSU program for most employees.
• Retirement matching program.
• Free 1Password account.
• Paid volunteer days.
• Peer-to-peer recognition through Bonusly.
• Remote-first work environment.