Careers
Junior Consulting GRC Engineer
Atoro is hiring a Junior Consulting GRC Engineer to support security and compliance delivery for scaling software and AI companies with enterprise customers.
The role at a glance
LocationEurope Remote
SalaryBased on experience
FocusAWS security, SOC 2 and ISO 27001
SelectionA guided practical discussion
The role
About the role
You will work alongside senior colleagues to assess AWS environments, investigate compliance findings and prepare audit evidence. This role suits someone with a practical technical foundation who wants to develop in cloud security and compliance.
You will contribute to real client engagements with supervision, taking on greater responsibility as your capability develops.
The work
What you will do
- Support AWS security reviews by collecting and checking configuration evidence against agreed requirements.
- Investigate findings relating to access management, logging, network exposure, encryption and backups, with senior guidance.
- Help maintain risk registers, remediation trackers, policies and control documentation.
- Use compliance platforms such as Drata and Vanta to review checks, organise evidence and follow up on gaps.
- Help turn findings into clear tasks for client engineering teams.
- Support audit preparation by checking that evidence is complete, relevant and clearly documented.
- Join client meetings, record decisions and communicate progress on your assigned work.
Technical recommendations and significant findings will be reviewed by a senior colleague.
Your experience
What you will bring
- A practical understanding of AWS fundamentals, including IAM, networking, storage and logging.
- Evidence of applying that knowledge through employment, an internship, substantial projects or practical labs.
- The ability to read basic cloud configurations, investigate a problem and explain your reasoning.
- An understanding of the purpose of SOC 2 and ISO 27001, and an interest in learning how controls operate in practice.
- Clear written communication, careful documentation and dependable follow-through.
- The judgement to recognise uncertainty and ask for support.
Exposure to Terraform, CI/CD, scripting or compliance platforms is useful. Previous consulting or audit experience is welcome but not required.
Relevant qualifications are welcome. We will assess your practical foundations and approach to learning alongside any certifications.
Who we are
About Atoro
Atoro is an Irish AI governance and cyber compliance consultancy, and the first in Europe to be certified against ISO 42001. We work with scaling software and AI companies with enterprise customers that want local presence and engineer-led delivery.
Our work runs from implementation and internal audit to ongoing managed compliance with TrustOps, plus outsourced DPO and virtual CISO services. Meet the team behind it.
How to apply
Selection process
A guided practical discussion will explore a simple AWS scenario, how you investigate a security concern and how you document what you find.
Apply for this role
Share your LinkedIn profile and a short note. If there is a fit, we will ask for your CV by email.
Atoro uses your details to assess your application. How long we keep them, and your rights, are set out in our privacy policy for job applicants.