Who we are: Through a partnership-based approach, Coterie helps insurance professionals unlock untapped revenue in the small commercial space. Backed by a16z.
About the role
Coterie's GRC team is seeking a GRC Engineer to help build, test, and improve how we manage and validate security, technology, and compliance controls. This hands-on technical role focuses on continuous control monitoring, application and technology control testing, risk evaluation, and the collection and validation of audit evidence directly from source systems. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- 4+ years of relevant experience in IT audit, GRC, information security, security assurance, technology risk, or related disciplines
- Hands-on experience testing technical security and technology controls and supporting audits or assessments such as SOC 2, SOX/ITGC, ISO 27001, NYDFS, NIST, or similar
- Strong understanding of security control domains, including identity and access management, logging and monitoring, vulnerability and endpoint management, cloud security, change management, SDLC, and backup and recovery
- Working knowledge of SQL, KQL, PowerShell, or similar tools for querying, analyzing, and validating system data used in control testing. Software engineering experience is not required
- Ability to evaluate control design and operation, understand the underlying risk, identify deficiencies and root causes, and recommend practical remediation or compensating controls
- Strong analytical, communication, and professional judgment skills, with the ability to work independently and effectively with technical teams, auditors, control owners, and other stakeholders
More about this role
Coterie's GRC team is seeking a GRC Engineer to help build, test, and improve how we manage and validate security, technology, and compliance controls. This hands-on technical role focuses on continuous control monitoring, application and technology control testing, risk evaluation, and the collection and validation of audit evidence directly from source systems.
The ideal candidate combines a strong understanding of risk and controls with the technical ability to work directly with systems and data. You will build and perform control testing, identify control and process gaps, assess associated risk, and recommend practical remediation or compensating controls. You will also support broader GRC initiatives, including risk management, BC/DR, privacy, and other program priorities as needed.
Control Monitoring & Testing
- Build and maintain repeatable testing and monitoring processes for security, technology, and application controls.
- Define how controls will be tested, including testing procedures, evidence requirements, frequency, expected results, and exception criteria.
- Perform control testing to assess design and operating effectiveness and document testing procedures,...
Browse similar: Startup jobs · Remote jobs