GRC Engineer

About the role:

The GRC Engineer will play a key role in transforming our compliance, risk, and control programs from more manual, point-in-time exercises into automated, continuously monitored systems. The successful candidate will work closely with internal engineering, security, privacy, finance, and business teams to translate regulatory requirements into technical controls, build automated evidence collection pipelines, and maintain key certifications such as ISO 27001, ISO 27701, PCI DSS, and more.

Furthermore, this role goes beyond traditional auditing by acting as an "engineer-first" practitioner. You will actively work to strengthen the organization’s security posture by designing automated frameworks, querying cloud APIs, leveraging AI capabilities, and establishing governance across Fever group companies. The position requires a solid understanding of security frameworks, cloud-native infrastructure, and programming capabilities to ensure the organization's compliance remains scalable and audit-ready

Join us if you thrive in a fast-paced environment and are excited about pushing the boundaries of what’s possible. This is an opportunity to have a real impact as a high-growth global category leader.

What would you do at Fever?

In your first month at Fever:

• You will be fully integrated into the team. You will participate in planning and follow-up meetings with other areas.
• You will have met the departments of Fever.
• You will get familiar with Fever's technological structure and ecosystem (applications, infrastructure, architecture, etc.)
• You will gain an understanding of our security processes, tools, and overall security landscape.

After 3 months in Fever:

• You will have full visibility into the compliance roadmap and start helping as a technical risk advisor across the organization.
• You will build automated evidence collection workflows using AI and scripting.
• You will participate in information security compliance audits.
• You will begin participating in key information security processes, including risk management, third-party due diligence reviews, and security awareness initiatives.

On your 6th month in Fever:

• You will collaborate with teams across the company to embed compliance checks and telemetry into a standardized GRC platform.
• You will create a knowledge base that enables stakeholders and the business to easily access and benefit from our information security capabilities.
• You will take an active role in managing responses to partners' information security requirements and security assessments.

Key Responsibilities:

• Transform the information security compliance program into an automated and continuously monitored system with a shift-left compliance mindset.
• Translate regulatory requirements into technical controls and build automated evidence collection pipelines.
• Automate compliance checks on AI governance and enablement.
• Maintain key certifications such as ISO 27001, ISO 27701, and PCI DSS.
• Provide technical risk advisory and collaborate with cross-functional teams to embed compliance checks and telemetry into a GRC platform.
• Manage responses to partners' information security requirements and security assessments.
• Develop a knowledge base to enable stakeholders to access and benefit from information security capabilities.
• Improve key information security processes, including risk management, third-party due diligence reviews, and security awareness initiatives.

About you

Must have:

• Strong programming/scripting skills (e.g., Python, Go, Bash) and experience building custom API integrations to automate evidence gathering.
• Comfortable designing, operating, and integrating GRC tools with AI-assisted workflows to simplify and scale repetitive compliance tasks.
• Proven experience in conducting security assessments and automating third-party vendor reviews.
• Strong understanding of security frameworks and standards, such as ISO 27001, SOC 2, NIST, PCI-DSS, or similar.
• Strong analytical and problem-solving skills.
• Ability to work cross-functionally to drive security initiatives.
• 3+ years of relevant experience in GRC Engineering, Security Engineering, or Cloud Security, managing the execution of highly technical compliance projects.
• Fluent in English.
• Good communication skills.

It would be a plus if you have:

• Bachelor's or Master’s Degree in Computer Science, Information Security, or another similar relevant degree (or equivalent experience in a technical security role).
• Certifications such as CISSP, ISO 27001 Lead Implementer, CRISC, CCSP, AWS/Google security or equivalent.
• Familiarity with continuous compliance automation engines (e.g., Vanta, Drata, etc).
• Experience with AI risk governance frameworks (such as the NIST AI Risk Management Framework or EU AI Act) and securing LLM-enabled tooling.

Benefits & Perks

• "Relación de dependencia" contract.
• Opportunity to have a real impact in a high-growth global category leader
• 40% discount on all Fever events and experiences
• OSDE 410 as medical insurance
• Home office friendly anywhere in Argentina
• Responsibility from day one, and professional and personal growth
• Great work environment with a young, international team of talented people to work with!
• English Lessons
• Gympass
• Attractive compensation package consisting of base salary and the potential to earn a significant bonus for top performance.