Senior Security GRC Engineer

div class= gmail_default style= font-size: small; div p strong Why Mozilla? /strong /p p Mozilla Corporation is the non-profit-backed technology company that has shaped the internet for the better over the last 25 years. We make pioneering brands like Firefox, the privacy-minded web browser. Now, with more than 225 million people around the world using our products each month, we're shaping the next 25 years of technology and helping to reclaim an internet built for people, not companies. Our work focuses on diverse areas including AI, social media, security and more. And we're doing this while never losing our focus on our core mission – to make the internet better for people. /p p The Mozilla Corporation is wholly owned by the non-profit 501(c) Mozilla Foundation. This means we aren't beholden to any shareholders — only to our mission. Along with thousands of volunteer contributors and collaborators all over the world, Mozillians design, build and distribute open-source software that enables people to enjoy the internet on their terms. /p p strong About this team and role: /strong /p p This role is part of the Governance, Risk amp; Compliance (GRC) function within Mozilla's Security team. The Security team supports Product, Enterprise, and GRC functions across the organization, aligned with the mission to build a safe and secure internet. This role is responsible for maintaining and advancing Mozilla's Information Security Management System (ISMS) and supporting our ISO 27001 and SOC 2 Type 2 compliance programs — from policy and control design through audit readiness and certification. /p p The ideal candidate has hands-on experience across the full breadth of a compliance program, is comfortable building process where none yet exists, and works well with a wide range of cross-functional stakeholders. /p strong What you'll do: /strong ul data-start= 99 data-end= 1504 li data-section-id= g3zchj data-start= 99 data-end= 261 Maintain and mature the ISMS, including the Statement of Applicability (SoA), risk treatment plans, and the Management Review Meeting (MRM) process and cadence. /li li data-section-id= a98hti data-start= 262 data-end= 469 Support ISO 27001 and SOC 2 Type 2 audit execution—helping determine scope, preparing evidence and narrative artifacts, participating in auditor interviews and walkthroughs, and resolving auditor findings. /li li data-section-id= 1mvm37t data-start= 470 data-end= 644 Contribute to the SOC 2 System Description and other audit-specific narrative documentation, ensuring they accurately reflect the organization's actual control environment. /li li data-section-id= 1c5myfc data-start= 645 data-end= 728 Track gaps and remediation efforts arising from readiness assessments and audits. /li li data-section-id= 16h0052 data-start= 729 data-end= 895 Lead the policy program—driving policy creation, revision, and cross-functional review cycles to keep the security policy set current, enforceable, and audit-ready. /li li data-section-id= 1wdqpxi data-start= 896 data-end= 1013 Support compliance scaling as additional products or business units pursue readiness assessments and certification. /li li data-section-id= xka45v data-start= 1014 data-end= 1161 Support the internal audit function, partnering with internal or third-party resources as needed to meet ISO 27001's internal audit requirements. /li li data-section-id= rzexta data-start= 1162 data-end= 1374 Partner closely with Engineering, IT, Legal, Privacy, People teams, and product leadership to gather evidence, drive control ownership, and translate compliance requirements into practical, adoptable practices. /li li data-section-id= 1k5kwf5 data-start= 1375 data-end= 1504 Advise the GRC manager and broader Security leadership on audit risk, certification readiness, and compliance program strategy. /li /ul strong What you'll bring: /strong ul data-start= 1529 data-end= 2784 li data-section-id= 6dgsxg data-start= 1529 data-end= 1611 5 years of experience in information security, GRC, or compliance-focused roles. /li li data-section-id= 13pegsv data-start= 1612 data-end= 1766 Deep familiarity with ISO 27001 and SOC 2 Trust Services Criteria, gained through meaningful involvement in audits from readiness through certification. /li li data-section-id= 4b48fa data-start= 1767 data-end= 1901 Comfort operating across the full breadth of an ISMS—SoA maintenance, Management Review Meetings, and System Description authorship. /li li data-section-id= j69szl data-start= 1902 data-end= 2063 Demonstrated experience writing and revising security policies, including running cross-functional review cycles to gain organization-wide buy-in and adoption. /li li data-section-id= 1kjovfg data-start= 2064 data-end= 2195 Experience tracking gaps and remediation plans and connecting that work to an organization's broader compliance and risk program. /li li data-section-id= 10adpps data-start= 2196 data-end= 2418 Excellent cross-functional collaboration skills—comfortable working with engineers, product managers, legal, and executive stakeholders, and able to translate compliance requirements into practical, actionable workflows. /li li data-section-id= 1h3m5rn data-start= 2419 data-end= 2495 Ability to ramp up quickly and operate with a high degree of independence. /li li data-section-id= 1lhnckf data-start= 2496 data-end= 2546 Comfort building processes where none yet exist. /li li data-section-id= ruv7v0 data-start= 2547 data-end= 2681 Strong written and verbal communication skills; ability to represent Mozilla credibly and confidently in front of external auditors. /li li data-section-id= 1f8ymq6 data-start= 2682 data-end= 2784 Relevant industry certifications (e.g., CISA, CISSP, ISO 27001 Lead Auditor/Implementer) are a plus. /li /ul strong Commitment to our values: /strong ul data-start= 2874 data-end= 2978 li data-section-id= 1s6ed8z data-start= 2874 data-end= 2897 Welcoming differences /li li data-section-id= 1fwjnc9 data-start= 2898 data-end= 2925 Being relationship-minded /li li data-section-id= 1slxk8b data-start= 2926 data-end= 2964 Practicing responsible participation /li li data-section-id= 18kady7 data-start= 2965 data-end= 2978 Having grit /li /ul strong What you'll get: /strong ul data-start= 3001 data-end= 3640 li data-section-id= 131m0bb data-start= 3001 data-end= 3104 Generous performance-based bonus plans to all eligible employees—we share in our success as one team. /li li data-section-id= 1tom7yi data-start= 3105 data-end= 3149 Rich medical, dental, and vision coverage. /li li data-section-id= 5ugc8y data-start= 3150 data-end= 3253 Generous retirement contributions with 100% immediate vesting (regardless of whether you contribute). /li li data-section-id= m1g0av data-start= 3254 data-end= 3330 Quarterly all-company wellness days where everyone takes a pause together. /li li data-section-id= mby2ad data-start= 3331 data-end= 3392 Country-specific holidays plus a day off for your birthday. /li li data-section-id= 15ntbic data-start= 3393 data-end= 3424 One-time home office stipend. /li li data-section-id= r9ac9u data-start= 3425 data-end= 3466 Annual professional development budget. /li li data-section-id= 7ti1pq data-start= 3467 data-end= 3498 Quarterly well-being stipend. /li li data-section-id= 1htbsxd data-start= 3499 data-end= 3534 Considerable paid parental leave. /li li data-section-id= 1vv9zik data-start= 3535 data-end= 3569 Employee referral bonus program. /li li data-section-id= 1a08eks data-start= 3570 data-end= 3640 Other benefits (life/AD amp;D, disability, EAP, etc.—varies by country). /li /ul p strong About Mozilla nbsp; /strong /p p Mozilla exists to build the Internet as a public resource accessible to all because we believe that open and free is better than closed and controlled. When you work at Mozilla, you give yourself a chance to make a difference in the lives of Web users everywhere. And you give us a chance to make a difference in your life every single day. Join us to work on the Web as the platform and help create more opportunity and innovation for everyone online. /p p strong Commitment to diversity, equity, inclusion, and belonging /strong /p p Mozilla understands that valuing diverse creative practices and forms of knowledge are crucial to and enrich the company’s core mission. nbsp; We encourage applications from everyone, including members of all equity-seeking communities, such as (but certainly not limited to) women, racialized and Indigenous persons, persons with disabilities, persons of all sexual orientation span style= color: #003366; s, /span gender identities, and expressions. /p p We will ensure that qualified individuals with disabilities are provided reasonable accommodations to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment, as appropriate. Please contact us at a class= external-link ---------- to request accommodation. /p p We are an equal opportunity employer. We do not discriminate on the basis of race (including hairstyle and texture), religion (including religious grooming and dress practices), gender, gender identity, gender expression, color, national origin, pregnancy, ancestry, domestic partner status, disability, sexual orientation, age, genetic predisposition, medical condition, marital status, citizenship status, military or veteran status, or any other basis covered by applicable laws. nbsp; Mozilla will not tolerate discrimination or harassment based on any of these characteristics or any other unlawful behavior, conduct, or purpose. /p p Group: C /p p #LI-REMOTE /p p Req ID: R3197 /p /div /div div class= content-pay-transparency div class= pay-input div class= description p strong Hiring Ranges: /strong /p /div div class= title Remote France /div div class= pay-range span €65.000 /span span class= divider mdash; /span span €87.000 EUR /span /div /div /div Find Jobs in France on Arbeitnow