GRC Engineer
Brewer Science, Inc. is a major innovator of high-technology solutions for the semiconductor / microelectronics markets. We are currently seeking a purpose-driven candidate with an ownership mentality to fill an open position as a GRC Engineer. This position will be located in Rolla, MO with some opportunity for hybrid work.Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor an employment visa for this position.Summary:GRC Engineers own and scale the company's governance, risk, and compliance programs, functioning in a hands-on, operational role. They are responsible for building, maintaining, and continuously improving the company's security compliance posture. This role works closely with security, engineering, IT, legal, and external auditors to ensure controls are implemented, evidence is automated when possible, and audits run smoothly.Responsibilities:GRC Engineer II:Own and manage ISO 27001 and NIST 800-171 compliance programs end-to-endAdminister and optimize the primary GRC platform, including:Control mapping and framework configurationEvidence automation and integrationsContinuous monitoring and remediation trackingLead audit readiness activities, including gap assessments, internal audits, and external auditor coordinationTranslate security and compliance requirements into practical, scalable controlsPartner with Manufacturing and IT to implement and validate technical controls (e.g., access management, logging, endpoint security)Develop and maintain security policies, standards, and procedures aligned to ISO 27001 and NIST 800-171Track and manage risks, exceptions, and corrective action plansMonitor control effectiveness and drive continuous improvementStay current on regulatory, customer, and industry security requirementsGRC Engineer III:Lead complex ISO 27001 and NIST 800-171 implementations across facilitiesDesign and mature control frameworks for IT and OT environmentsConduct advanced risk assessments for manufacturing systems, lab systems, and cloud platformsArchitect GRC platform enhancements and automation strategiesDevelop control testing methodologies and assurance processesLead complex audit engagements and remediation programsProvide technical advisory support for secure system and process designStandardize control implementation across multiple plantsMentor junior engineers on technical GRC practicesEducation & Credentials:GRC Engineer II:Bachelor's degree in cybersecurity, computer science, IT or related field and 2+ years' experience in a related field orMaster's degree in cybersecurity, computer science, IT, or related field andCertification such as ISO 27001 Lead Implementer/Auditor, CISA, CRISC, or CISSPAn equivalent combination of education and experience.GRC Engineer III:Bachelor's degree in cybersecurity, computer science, IT or related field and 4+ years' experience in a related field orMaster's degree in cybersecurity, computer science, IT, or related field and 2+ years' experience in a related field andCertification such as ISO 27001 Lead Implementer/Auditor, CISA, CRISC, or CISSPAn equivalent combination of education and experience.BenefitsAt Brewer Science, we are a Top Workplace, Certified Employee-Owned, Certified B Corp, and GreenCircle Certified Zero Waste to Landfill. By joining Brewer Science, you will be eligible to receive benefits including:Medical, dental, vision, life, long- and short-term disability, identity theft protection, and pet insurancePaid leave, including community service leave, wellness breaks, and other special leaveEmployee stock ownership, 401k, and bonus plansEducational assistance & employee assistance programApplicants must be authorized to work for any employer in the U.S. We are unable to sponsor an employment visa for this position.Application Process: To apply for this position please complete the online application. This position is open until filled. Screening will begin immediately.Equal Employment Opportunity - M/F/Disability/Veterans