Careers
Build your career in GRC engineering
Bring together cloud security, engineering and the judgement that makes compliance work.
At Atoro, you will help scaling software and AI companies understand their risks, improve their AWS environments and demonstrate that their security controls work.
We are hiring a Senior Consulting GRC Engineer and a Junior Consulting GRC Engineer.
Atoro at a glance
Europe’s first ISO 42001 certified consultancyAudited and certified by A-LIGN.
ISO 27001 certified ourselvesWe run the management systems we sell.
200+ certifications deliveredAcross ISO 27001, SOC 2, ISO 42001, GDPR and penetration testing.
Cyber Ireland memberPart of Ireland’s national cyber security cluster.
The discipline
Why GRC engineering?
A control has to work in a real system. An access policy needs to match the permissions people actually hold. A backup needs evidence that it can be restored. A finding needs a fix that an engineering team can implement and maintain.
GRC engineering connects governance, risk and compliance to those technical realities. It combines cloud knowledge, repeatable testing and automation with the ability to make sound decisions about risk.
For people who enjoy understanding how systems work and explaining how to improve them, it offers a career that spans technical investigation, problem-solving and client advice.
The work
What makes the work interesting?
Get close to the technology.
Review AWS configurations, understand deployment workflows and work through security findings with engineers.
Connect technical detail to business decisions.
Explain what a risk means, what should change and how the client can demonstrate improvement.
Make compliance easier to maintain.
Use evidence collection and monitoring tools thoughtfully, checking their coverage and investigating what they miss.
Learn across client environments.
Apply SOC 2 and ISO 27001 requirements to different architectures, teams and stages of growth.
Open roles
Two roles, different starting points
Senior Consulting GRC Engineer
Europe Remote
AWS security
SOC 2
ISO 27001
Lead client engagements, make technical recommendations and help junior colleagues develop. Bring practical AWS security experience and a record of delivering compliance programmes.
Junior Consulting GRC Engineer
Europe Remote
AWS security
SOC 2
ISO 27001
Build on your AWS foundations through supervised client work. Develop your ability to investigate findings, assess evidence and explain recommendations.
Europe Remote. Salary based on experience.