Careers
Senior Consulting GRC Engineer
Atoro is hiring a Senior Consulting GRC Engineer to lead security and compliance engagements for scaling software and AI companies with enterprise customers.
The role at a glance
LocationEurope Remote
SalaryBased on experience
FocusAWS security, SOC 2 and ISO 27001
SelectionA practical technical discussion
The role
About the role
You will assess AWS environments, turn security risks into practical remediation plans and guide clients through SOC 2 readiness and ISO 27001 implementation. You will work directly with founders, CTOs and engineering teams, taking responsibility for the quality and progress of client delivery.
The work
What you will do
- Lead technical risk assessments and review AWS architecture, IAM, network exposure, logging, encryption and backup arrangements.
- Translate compliance gaps into specific engineering tasks, with clear priorities, owners and acceptance criteria.
- Review Terraform and CI/CD configurations, discuss implementation options with engineers and validate remediation.
- Lead gap assessments, risk treatment planning, control implementation and audit preparation.
- Configure and improve compliance platforms such as Drata and Vanta, investigating failed checks and gaps in evidence.
- Manage client expectations, explain technical decisions and coordinate responses to auditor requests.
- Review junior colleagues’ work and support their development.
The role covers assessment, remediation guidance and validation. Production changes depend on the agreed client scope and access.
Your experience
What you will bring
- Strong practical experience assessing or securing production AWS environments.
- The ability to review IAM policies and cloud configurations, explain the risks and recommend specific improvements.
- A working understanding of Terraform, CI/CD, container security and AWS security services.
- Practical experience delivering SOC 2 readiness and ISO 27001 implementation.
- Hands-on experience with Drata, Vanta or a comparable compliance platform.
- Experience leading client engagements and communicating with technical and business stakeholders.
- Sound judgement about proportionate controls, engineering effort and business priorities.
Relevant AWS, security and compliance qualifications are welcome. Demonstrated technical capability and delivery experience are central to the role.
Who we are
About Atoro
Atoro is an Irish AI governance and cyber compliance consultancy, and the first in Europe to be certified against ISO 42001. We work with scaling software and AI companies with enterprise customers that want local presence and engineer-led delivery.
Our work runs from implementation and internal audit to ongoing managed compliance with TrustOps, plus outsourced DPO and virtual CISO services. Meet the team behind it.
How to apply
Selection process
A practical technical discussion will assess how you prioritise AWS security risks, recommend remediation and define the evidence needed for audit readiness.
Apply for this role
Share your LinkedIn profile and a short note. If there is a fit, we will ask for your CV by email.
Atoro uses your details to assess your application. How long we keep them, and your rights, are set out in our privacy policy for job applicants.