Security Governance, Risk, and Compliance Engineer

Responsibilities

• Utilize GRC tools, APIs, and custom code to gather metrics and evidence across various platforms
• Automate the tracking, visualization, and reporting of KPIs and KRIs
• Partner with software developers and systems engineers for threat modeling and security architecture reviews
• Translate compliance requirements into technical implementation guidance and review infrastructure-as-code
• Perform security control assessments using NIST and CIS frameworks
• Maintain the security risk register and create security/compliance policies
• Support automation and governance for vulnerability management, vendor risk, penetration testing, and access management

Requirements

• 5+ years of experience in security GRC or engineering in a heavily regulated industry
• Familiarity with CIS, NIST-CSF, or ISO frameworks
• Experience building cross-functional relationships across technical and non-technical teams
• Hands-on experience in systems engineering, security engineering, cloud infrastructure, DevOps, SRE, or application security
• Understanding of secure SDLC controls (SAST, DAST, threat modeling, etc.)
• Proficiency with Linux and command line
• Software development or scripting experience, preferably in Python
• Data analysis skills using SQL, Elastic, OSQuery, or Prometheus

Preferred Qualifications

• CISSP, CISM, or similar certification

About the Company

Hudson River Trading (HRT) brings a scientific approach to trading financial products, building sophisticated computing environments for research and development in algorithmic trading.