Governance, Risk, and Compliance Engineer, Blue Ash, Ohio, United States

Governance, Risk, and Compliance Engineer

00069003241

Date de publication mai 26 2026

Localisation Blue Ash / United States

Catégorie d’emploi Corporate

Modalité de travail Hybrid

About Cognizant

Cognizant is one of the world’s leading professional services companies, helping clients modernize technology, reimagine processes, and manage risk in complex and highly regulated environments. Cognizant supports secure, compliant, and resilient operations across industries.

Role Summary

The Governance, Risk, and Compliance (GRC) Engineer supports the implementation, validation, and continuous monitoring of security and compliance controls across the organization. This role ensures alignment with regulatory and contractual requirements and maintains audit readiness against frameworks such as NIST SP 800‑171 and CMMC Level 2. The GRC Engineer works closely with technology teams and business stakeholders to assess risk, remediate gaps, and improve compliance processes.

Key Responsibilities

Support the implementation and validation of security and compliance controls aligned with NIST SP 800‑171 and CMMC Level 2.
Ensure compliance evidence is accurate, complete, and audit‑ready.
Collaborate with service owners to conduct risk assessments, document findings, and track remediation activities through closure.
Maintain and update risk registers, including residual risk and mitigation plans.
Prepare audit artifacts and coordinate walkthroughs and interviews for internal and external audits.
Drive remediation efforts with control owners and support prevention of recurring audit findings.
Contribute to the creation, review, and revision of security and compliance policies.
Support role‑based security training, awareness activities, and phishing campaigns.
Develop and maintain reporting workflows to track compliance status, risk metrics, and remediation progress.
Partner with cross‑functional teams to translate compliance requirements into operational processes.
Participate in onsite or virtual audits as required to verify ongoing compliance.

Required Qualifications

3–7 years of experience in governance, risk, compliance, information security, or a related field.
Experience supporting compliance initiatives aligned with NIST SP 800‑171 and CMMC Level 2.
Working knowledge of vulnerability management and risk management practices.
Experience with governance, risk, and compliance platforms and IT service management tools.
Familiarity with ISO 27001 and information security awareness programs.
Strong documentation, organizational, and communication skills.

Preferred Qualifications

Security or compliance certifications such as Security+, CISA, CISM, CISSP, ISO 27001 Lead Implementer/Auditor, CCP, or CMMC Certified Professional.
Experience maintaining audit‑ready evidence and supporting remediation activities across multiple teams.

Work Model

We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role’s business requirements, this is a hybrid position requiring 3 days a week in our office in Blue Ash, Ohio. Regardless of your working arrangement, we are here to support a healthy work-life balance though our various wellbeing programs.

The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.

We're excited to meet people who share our mission and can make an impact in a variety of ways. Don't hesitate to apply, even if you only meet the minimum requirements listed. Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role.

Legal & Work Authorization

Candidates must be legally authorized to work in the United States. Employment eligibility verification will be required at the time of hire.

À propos de nous

Cognizant (NASDAQ: CTSH) est un concepteur d’IA et un fournisseur de services technologiques. Avec notre gamme de solutions IA full-stack, nous accompagnons nos clients au carrefour de l’investissement dans l’IA et de la valeur ajoutée. Notre grande expertise sectorielle, des processus et de l’ingénierie nous permet de convertir le contexte propre à chaque entreprise en systèmes technologiques amplificateurs du potentiel humain, générateurs de résultats tangibles et garants de l’avantage des acteurs internationaux dans un monde en constante évolution. Découvrez notre méthode sur www.cognizant.com ou suivez @cognizant.

Renseignments suppplémentaires sur l'emploi
Les informations sur la rémunération sont exactes à la date de publication. Cognizant se réserve le droit de modifier ces informations à tout moment, conformément aux lois applicables.

Les exigences linguistiques varient selon les postes, mais nous demandons à tous les candidats d’avoir une connaissance de base de l’anglais afin de faciliter les communications internes à l’échelle de l’entreprise. Pour les postes basés au Québec, une maîtrise de l’anglais est requise puisque vous fournirez des services et collaborerez avec des parties prenantes situées hors de la province, qui ne parlent pas nécessairement le français.

Cognizant est un employeur souscrivant au principe de l’égalité d’accès à l’emploi. Votre candidature et votre dossier ne seront pas examinés en fonction de la race, de la couleur, du sexe, de la religion, des croyances, de l'orientation sexuelle, de l'identité de genre, de l'origine nationale, du handicap, de l'information génétique, de la grossesse, du statut d'ancien combattant ou de toute autre caractéristique protégée telle que décrite par les lois fédérales, provinciales ou locales.

Si vous avez un handicap qui nécessite un aménagement raisonnable pour rechercher une offre d'emploi ou poser une candidature, envoyiez un courriel à [email protected] avec votre demande et vos coordonnées.