Staff Security GRC Engineer @Mozilla Corporation

Overview

The Staff Security GRC Engineer role is part of the Governance, Risk & Compliance (GRC) function within Mozilla's Security team. This position is responsible for maintaining and advancing Mozilla's Information Security Management System (ISMS) and supporting compliance programs for ISO 27001 and SOC 2 Type 2.

Key Responsibilities

• Maintain and improve the ISMS, including risk treatment plans and related processes.
• Support audits for ISO 27001 and SOC 2 Type 2, preparing necessary evidence and participating in auditor interviews.
• Contribute to the SOC 2 System Description and audit-specific documentation.
• Track gaps and remediation efforts from audits and assessments.
• Lead the security policy program, ensuring policies are current and audit-ready.
• Support compliance scaling for new products and business units.
• Assist with internal audit functions to meet ISO 27001 requirements.
• Collaborate with various teams to gather evidence and implement compliance practices.
• Advise on audit risk, certification readiness, and compliance strategy.

Requirements

• 5 years of experience in information security, GRC, or compliance roles.
• Familiarity with ISO 27001 and SOC 2 Trust Services Criteria.
• Experience with ISMS maintenance and documentation.
• Proven skills in policy writing and cross-functional collaboration.
• Ability to operate independently and build processes from scratch.
• Strong communication skills and the ability to represent Mozilla effectively.
• Relevant industry certifications (e.g., CISA, CISSP, ISO 27001 Lead Auditor) are a plus.

Benefits

• Generous performance-based bonuses.
• Rich medical, dental, and vision coverage.
• Generous retirement contributions with immediate vesting.
• Quarterly wellness days.
• Country-specific holidays and a day off for your birthday.
• Home office stipend and annual professional development budget.
• Quarterly well-being stipend and considerable paid parental leave.
• Employee referral bonus program.
• Other benefits vary by country.

Location

Remote

How to Apply

To apply, please select your location from the Apply Now dropdown menu.

Deadline

No deadline stated.