Governance, Risk & Compliance Engineer en Kaseware

Job Title: Governance, Risk & Compliance Engineer

Location: Denver, Colorado/Hybrid

Do you love technology and helping organizations utilize that technology to become greater than they thought possible? Are you interested in serving your community and doing your part to keep your community, nation, and planet safe? At Kaseware, you will have the chance to do all of that and so much more as our GRC Compliance Engineer. Kaseware is a company that is changing the world of law enforcement and corporate security forever and, if you are up for a challenge, we would like you to consider helping us make the world a safer place.

We are looking for a new GRC Compliance Engineer to join our Security & Compliance Team. Our customers use our software for critical work in public safety and corporate security, and it is our mission to ensure our systems and operations meet the highest standards of compliance. That’s where you come in.

Job Type: Full-time Exempt 

Responsibilities and Duties:

• Support governance, risk, and compliance (GRC) initiatives across multiple frameworks, including NIST 800-53/800-171, ISO 27001/27701, PCI DSS, and FedRAMP.
• Assist in developing and maintaining compliance documentation, policies, procedures, and control mappings across frameworks.
• Enable centralized GRC tooling to streamline evidence collection, artifact management, and automated reporting.
• Partner with engineering, security, and operations teams to ensure system configurations and processes align with compliance requirements.
• Monitor regulatory updates and framework revisions to maintain continuous compliance.
• Support internal and external audits by coordinating evidence gathering, preparing documentation, and ensuring audit readiness.
• Perform control assessments and risk reviews to identify gaps and propose remediation plans.
• Contribute to the improvement of compliance workflows through automation and best practices.

Required Education:

• Bachelor’s Degree in Information Security, Computer Science, Risk Management, or related field (Required). 
• Related experience can be substituted for education. If any training or course in GRC may provide relative expertise in the compliance processes.

Required Skills & Experience:

• 3+ years of experience in information security, GRC, or compliance engineering.
• Familiarity with frameworks and standards: NIST, ISO 27001/27701, PCI DSS, FedRAMP.
• Hands-on experience with centralized GRC platforms or compliance automation tools (e.g., Hyperproof, Drata, OneTrust, Archer).
• Strong understanding of artifact collection and evidence management in compliance programs.
• Knowledge of security and compliance processes such as risk assessments, control testing, and audit support.
• Excellent communication and documentation skills.
• Ability to work cross-functionally and translate compliance requirements into actionable technical and operational tasks.

Other Requirements:

• Language: English

Benefits:

• Salary Range: $120,000 - $150,000
• Excellent health, dental, and vision insurance with generous company contribution
• Flex Spending Accounts
• Unlimited paid vacation
• 12 paid company holidays
• Paid Sick Time
• Paid Parental Leave
• 401k with company matching
• EcoPass provided for Colorado-based employees

About Kaseware:

Kaseware is a dynamic start-up company located in the Denver metro area. We build state-of-the-art software for law enforcement and corporate security customers. We serve those that serve our communities and make our world safer.

Due to the nature of our business, you must be able to pass a full CJIS compliant fingerprint based background check, which is required for individuals needing access to criminal justice information (CJI).

U.S. Citizens and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor at this time.

We expect this role to be open until Oct 15th or until filled.