Commercial GRC Engineer - Sr. Security Engineer I
Smartsheet · Bellevue, WA, USA
About the role
Brings an engineering approach to Smartsheet's commercial GRC programme, which covers SOC 2 Type II, the ISO 27001/27017/27701/22301 family and HIPAA, aiming to replace audit-season scrambles with steady readiness. The engineer reports to the Senior Director, GRC Engineering, and may work from Bellevue or remotely in the US.
The engineer automates evidence collection and control monitoring across cloud, identity, endpoint and SaaS systems, keeps controls, tests and cross-framework mappings as version-controlled code, joins design reviews to set control requirements early, gives engineers compliance feedback inside their own tools, runs audit cycles end to end and builds readiness dashboards. Smartsheet wants four or more years in GRC engineering, compliance automation or similar work, a full certification cycle owned, hands-on use of platforms such as Vanta or Drata, cloud security basics and scripting in Python or JavaScript.