About the Role
The Fivetran information security organization is a motivated and innovative team responsible for ensuring the continuous integrity, confidentiality, and availability of customers’ data. Our customers trust us with all their most sensitive information, and we consider maintaining that trust to be a critical, core component of our product and business. Fivetran is seeking a motivated candidate for a GRC Senior Engineer of the Security Team. The role requires a compliance-focused engineer with knowledge and expertise in building data sets that will be used to turn our compliance into a continuous data-driven function. The position reports to the Director, GRC. Will build and own a security data lake that aggregates evidence and telemetry from across our environment, and use it to power continuous control monitoring (CCM) that replaces manual control testing with automation. You will also support core GRC operations, including internal and external audits, risk management, and vendor assessments. Acts as a subject matter expert within specific responsibility area(s) and applies internal audit best practices and keeps current with applicable rules and regulations for security compliance frameworks, as well as any authoritative pronouncements issued by relevant governing bodies. Advanced security risk or audit certifications are required and leading cybersecurity certifications are preferred.
This is a full-time position based out of our Denver office. Our hybrid work model offers a blend of remote flexibility and in-person collaboration, including two days in the office each week to connect and build as a team.
Technologies You’ll Use
AWS, GCP, Azure, Kubernetes, Secureframe, Wiz, GitHub
What You’ll Do
You will build and maintain a security data lake on Fivetran itself, using our own platform to centralize the data that powers continuous control monitoring.
Govern the lake itself: enforce data quality, retention, least-privilege access, and sensitive-data handling
Build compliance-as-code: automated evidence collection, continuous control monitoring, and policy-as-code checks across cloud (AWS, GCP, Azure), Kubernetes, CI/CD pipelines, identity, and SaaS systems
Integrate and extend GRC tooling and internal platforms with APIs, scripts, and workflows that replace manual audit work and give real-time visibility into control health
Support Fivetran's certifications and attestations: ISO 27001, ISO 27701, ISO 27017, ISO 27018, ISO 42001, PCI DSS, SOC 2, and HITRUST
Skills We’re Looking For
5+ years in GRC, security engineering, data engineering, or a related fieldUnderstanding and ability to perform control testing, documentation, and control design
Strong SQL and proficiency in Python (or similar) for automation and data transformation
Hands-on experience with a modern data stack (cloud warehouse/lake, ETL/ELT, orchestration, transformation tooling)
Experience automating control testing or replacing manual compliance processes with code-driven checks
Working knowledge of several of: ISO 27001 family, SOC 2, PCI DSS, HITRUST
Familiarity with cloud security controls in [AWS / GCP / Azure] and common SaaS security configurations
Ability to translate control language into technical tests, and technical results into audit-ready narratives
Clear written communication and comfort working across Security, IT, Engineering, Legal, and Finance
Bonus Skills
Experience in dealing with external audits
Professional audit or information security certifications preferred (CISA, CISSP, AWS, SANS GIAC, etc.).
An understanding of control frameworks Fivetran follows: SOC 1/2, PCI-DSS, ISO 27001, NIST 800-53, ISO 27017, ISO 27018, ISO 27701, ISO 42001, HITRUST, FedRAMP
The compensation range displayed on this job posting reflects the minimum and maximum target for new hire compensation for the target position and level, and may include sales incentives or target bonuses depending on the role. Our compensation ranges are determined by role, level, and location. Our job titles may span more than one career level. Within the range, individual compensation is determined by additional factors, including job-related skills, experience, relevant education or training, business need, market demands. The compensation range is subject to change and may be modified in the future. Your recruiter can share more about the specific compensation range for your location during the hiring process.
Pay Range
$148,788—$185,984.75 USD
Perks and Benefits
100% employer-paid medical insurance*
Generous paid time away from work, including paid vacation or flexible/unlimited vacation depending on role and country, plus paid sick time, inclusive parental leave, paid holidays, including a year-end Global Week of Rest, and volunteer days off.
RSU stock grants*
Professional development and training opportunities
Company virtual happy hours, free food, and fun team-building activities
Monthly cell phone stipend
Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents.
May vary by country and worker type - please reach out to your recruiter for more information
Click here to learn more about Fivetran's Benefits by Region.
We’re honored to be valued at over $5.6 billion, but more importantly, we’re proud of our core values of Get Stuck In, Do the Right Thing, and One Team, One Dream. Read about us in Forbes.
Fivetran brings together high-quality talent across the globe to make data access as easy and reliable as electricity for our customers. We value and recognize that our customers benefit from having innovative teams made of people from many backgrounds, experiences, and identities. Fivetran promotes diversity, equity, inclusion & belonging through attracting, recruiting, developing, and retaining a diverse workforce, not only because it is the right thing to do, but because it helps us build a world-class company to better serve our customers, our people and our communities.
To learn more about Fivetran’s culture and what it’s like to be part of the team, click here and enjoy our video.
To learn more about our candidate privacy policy, you can read our statement here.
We are committed to ensuring that all candidates have an equal opportunity to participate in our interview process. If you require accommodations at any stage of the process due to a disability, medical condition, or any other circumstance, please don't hesitate to submit your request by filling out this form. We will work with you to provide reasonable accommodations to facilitate your participation and ensure a fair and accessible interview experience. Your request and any information provided will be kept confidential and will not impact your candidacy. We look forward to hearing from you and accommodating your needs to the best of our ability.
