GRC Engineer

We're looking for a mid-level GRC Engineer to help us scale our compliance program through automation and run audits across SOC 2 ISO 27001 and SOX. This is a hands-on technical role where you'll spend as much time writing code and integrating systems as you do reviewing controls. You'll serve as the bridge between Security Engineering and the business by transforming manual evidence-heavy compliance work into automated repeatable processes while helping leadership understand and prioritize risk.

This role is ideal for someone with GRC or security experience who wants to move beyond spreadsheets and checklists into building the tooling that makes a compliance program efficient scalable and audit-ready year-round.

In this role you will:

Automation & Tooling

• Build and maintain automation for continuous control monitoring evidence collection and audit readiness through scripts APIs and GRC platform integrations
• Integrate compliance workflows with cloud providers identity systems ticketing platforms and CI/CD pipelines to automatically collect control data and evidence
• Reduce manual compliance work by codifying control checks and pulling evidence directly from source systems
• Develop dashboards and reporting that provide stakeholders with real-time visibility into control health and audit readiness

Audits & Frameworks

• Run and coordinate audits for SOC 2 (Type I and Type II) ISO 27001 and SOX including scoping evidence collection control walkthroughs and auditor coordination
• Map controls across multiple compliance frameworks to reduce duplication and maintain a unified control library
• Track audit findings and control gaps through remediation and closure with business and technical stakeholders
• Maintain audit-ready documentation including policies procedures control narratives and evidence repositories

Risk Management

• Identify assess and document organizational risks while maintaining the enterprise risk register
• Support risk assessments including likelihood and impact scoring treatment planning and remediation tracking
• Partner with Engineering and IT to evaluate the control impact of new systems vendors and architectural changes
• Contribute to the third-party risk management program

Cross-Functional Partnership

• Partner with control owners to ensure controls are operating effectively and generating appropriate evidence
• Translate compliance requirements into practical engineering-focused guidance
• Support customer security questionnaires trust requests and due diligence activities

• 3–5 years of experience in GRC IT audit security compliance or a related field
• Hands-on experience supporting or leading audits for SOC 2 ISO 27001 SOX or a comparable framework
• Working knowledge of SOC 2 Trust Services Criteria ISO 27001 Annex A COSO/SOX ITGCs NIST or similar control frameworks
• Experience with scripting and automation using Python or a similar language including working with REST APIs to automate evidence collection
• Familiarity with at least one major cloud platform (AWS GCP or Azure) and its security and logging services
• Strong understanding of access management change management logging and monitoring vulnerability management and SDLC controls
• Excellent written communication skills with the ability to create clear control documentation risk assessments and stakeholder reporting
• Ability to manage multiple priorities while driving audit findings and remediation efforts to completion

• Experience with Infrastructure as Code (Terraform) and CI/CD pipeline security
• Exposure to SOX ITGC testing within a public company or pre-IPO environment
• Experience using SQL or data analysis for evidence collection and control sampling
• Certifications such as CISA CISSP CCSK ISO 27001 Lead Implementer or Lead Auditor or cloud security certifications
• Experience working directly with external auditors and managing audit timelines

The salary range for this role will be $130000.00 - $145000.00 USD. In addition this position will also receive an annual target bonus of 10%. Bonus pay at NinjaTrader is based on individual performance (50%) as well as company/team performance (50%).

Salary and bonus earnings are only two components of the total compensation package offered by NinjaTrader. NinjaTrader offers a 401K plan through ADP under which the company will match up to 3.5% of employee contributions. Annual paid time off allowance accrues at a rate of 18 days per year (some positions may qualify for more) plus seven paid holidays.

This role is based in Chicago IL. We are not open to remote candidates for this role.

For Chicago-based employees we follow a hybrid work schedule: In-office Tuesday through Thursday with remote work on Mondays and Fridays. In addition to these weekly remote days we offer:

• 20 additional flex remote days annually
• 5 Company Wide Office-Optional weeks tied to major holidays

What We Do

More than 2 million futures traders trust NinjaTrader's award-winning software and brokerage services to help them trade smarter. Since 2003 we've been building better futures for all traders by making futures trading more accessible scalable and user-friendly. As a bold innovative thought leader in the trading space we build products and services that empower active futures traders to easily analyze and react to data from the world's leading financial markets. Veteran and new futures traders alike look to us for our always-on support daily free education and analysis access to developer apps and much more. We believe in the power of innovation to drive futures trading forward. Together we continue to redefine what's possible in trading advocate for our customers and provide the best tools support and experiences to the fast-growing retail futures trading community. Located in Chicago our entrepreneurial employee-centric culture is inspiring innovative and inviting. We're committed to diversity equity and inclusivity so our team members feel at ease to be themselves and empowered to deliver the work they do best.

Why Work With Us

Our team members are our #1 asset and the signature ingredient to our success. When you join NinjaTrader you become part of an innovative forward-looking community that encourages creativity collaboration and camaraderie to deliver the best futures trading experience possible to our more than 1.8 million users. See why better futures start here.

Gallery