Mozilla
Senior Security GRC Engineer
CA · Remote Canada · Remote · Full-time · Senior
Salary not stated
AI summary
About the company
Mozilla是由非营利组织支持的科技公司，旗下有Firefox浏览器，服务全球超2.25亿月活用户，使命是打造以人为本的互联网，业务涵盖AI、安全等领域。
Role overview
该岗位隶属于Mozilla基础设施团队的安全职能，负责为企业和产品垂直领域定义、开发并实施治理、风险与合规框架，整合安全、隐私、监管及风险管理举措，面向全球开放，为全职远程岗位，工作地点为加拿大。
Responsibilities
- 开展风险评估，维护风险登记册，跟踪风险处理计划
- 协调合规与审计相关的证据收集，维护SOC 2等文档
- 支持SSDLC治理、数据分类与BIA/BC/DR活动
- 管理GRC平台，优化自动化GRC流程
- 协调渗透测试，跟踪漏洞管理指标
Requirements
- 2-4年网络安全、GRC或IT审计相关经验
- 掌握SOC 2、ISO 27001等安全合规框架
- 熟悉风险评估概念与管理生命周期
- 具备GRC平台（如Vanta、Drata）实操经验
- 具备脚本或自动化技能（如Python、SQL）
- 良好的沟通与 stakeholder 协作能力
Nice to have
- 有SOC 2、ISO 27001等审计支持经验
- 具备漏洞管理、第三方风险等领域经验
- 持有Security+、CISA等相关认证
Register to apply directly, open the original posting and save jobs
Sign up freeThis is not an official page of Mozilla. The listing is gathered automatically from the employer's official careers page or a job board's public feed (see sources on the right). Fintegrity has no agency relationship with this employer and has not verified its credentials. Chinese titles and summaries are AI-generated; the original text prevails. Apply on the source page. We never charge job seekers. Ranking & display rules
Excerpt
Why Mozilla? Mozilla Corporation is the non-profit-backed technology company that has shaped the internet for the better over the last 25 years. We make pioneering brands like Firefox, the privacy-minded web browser. Now, with more than 225 million people around the world using our products each…
Sign up freeThe summary and highlights are AI-generated and may contain errors; the original posting prevails.
Sources or employers who want a posting removed or corrected can email contact@fintegrity.cn; we act within 24 hours.