Senior GRC Engineer - EMEA

About the role

Cisco Isovalent, the company founded by the creators of Cilium and eBPF, is looking for a senior Security Officer / GRC (Governance, Risk and Compliance) Engineer to support its Hypershield solution. The role provides senior security guidance and hands-on engineering contributions, partnering with Engineering, Architecture, Product Management, SRE, Compliance, the Security and Trust Organization and leadership teams to meet security, privacy, corporate and regulatory requirements while enabling rapid, secure product delivery.

Key responsibilities

• Assess and guide improvements to the security posture of Hypershield components and delivery workflows.
• Translate Cisco-level security mandates, policies, audit requirements, release gates and best practices into clear guidance, control expectations, acceptance criteria and remediation priorities.
• Work with developers, architects, product management, SRE and compliance teams to review new features, architecture changes and security-sensitive designs, identify gaps and recommend mitigations.
• Support compliance with Cisco security mandates and Build Environment Security requirements by clarifying requirements, gathering evidence, reviewing audit findings and guiding remediation.
• Help define and implement security and compliance automation, reporting and tooling that improve visibility and reduce manual work.

Required profile

• Bachelor's degree and more than 5 years of hands-on experience implementing security and compliance automation, hardening, vulnerability remediation, secure delivery improvements or related DevSecOps capabilities.
• More than 3 years of experience conducting security reviews, architecture reviews, threat or risk assessments and turning findings into practical guidance and remediation plans (for example to comply with SOC2, ISO or other certification frameworks).
• Experience with corporate security mandates, secure development lifecycle requirements, product security standards, compliance requirements or security audit processes.

Required skills

• Experience with security frameworks and compliance audits such as SOC 2, ISO 27001, and privacy regulations such as GDPR.
• Preferred: building and maintaining Compliance-as-Code capabilities (policy-as-code, automated control validation, continuous evidence collection integrated into CI/CD).
• Preferred: certifications such as CISSP, CISM, CCSP, and experience with FedRAMP or CRA.
• Preferred: experience with Cisco security mandates, policies and tooling, and strong communication skills with technical and non-technical audiences.