About This Opportunity

<div class="gmail_default" style="font-size: small;"> <div> Why Mozilla? &l

This listing is organized to help candidates compare the role, location, experience level and application source before visiting the employer or source website. Final eligibility, salary, selection process and deadlines should be confirmed from arbeitnow.com.

Skills And Responsibilities

<div class="gmail_default" style="font-size: small;"> <div> Why Mozilla? Mozilla Corporation is the non-profit-backed technology company that has shaped the internet for the better over the last 25 years
We make pioneering brands like Firefox, the privacy-minded web browser
Now, with more than 225 million people around the world using our products each month, we're shaping the next 25 years of technology and helping to reclaim an internet built for people, not companies
Our work focuses on diverse areas including AI, social media, security and more
And we're doing this while never losing our focus on our core mission – to make the internet better for people. The Mozilla Corporation is wholly owned by the non-profit 501(c) Mozilla Foundation
This means we aren't beholden to any shareholders — only to our mission
Along with thousands of volunteer contributors and collaborators all over the world, Mozillians design, build and distribute open-source software that enables people to enjoy the internet on their terms. About this team and role: This role is part of the Governance, Risk &amp; Compliance (GRC) function within Mozilla's Security team
The Security team supports Product, Enterprise, and GRC functions across the organization, aligned with the mission to build a safe and secure internet
This role is responsible for maintaining and advancing Mozilla's Information Security Management System (ISMS) and supporting our ISO 27001 and SOC 2 Type 2 compliance programs — from policy and control design through audit readiness and certification. The ideal candidate has hands-on experience across the full breadth of a compliance program, is comfortable building process where none yet exists, and works well with a wide range of cross-functional stakeholders. What you'll do: <ul data-start="99" data-end="1504"> <li data-section-id="g3zchj" data-start="99" data-end="261">Maintain and mature the ISMS, including the Statement of Applicability (SoA), risk treatment plans, and the Management Review Meeting (MRM) process and cadence.</li> <li data-section-id="a98hti" data-start="262" data-end="469">Support ISO 27001 and SOC 2 Type 2 audit execution—helping determine scope, preparing evidence and narrative artifacts, participating in auditor interviews and walkthroughs, and resolving auditor findings.</li> <li data-section-id="1mvm37t" data-start="470" data-end="644">Contribute to the SOC 2 System Description and other audit-specific narrative documentation, ensuring they accurately reflect the organization's actual control environment.</li> <li data-section-id="1c5myfc" data-start="645" data-end="728">Track gaps and remediation efforts arising from readiness assessments and audits.</li> <li data-section-id="16h0052" data-start="729" data-end="895">Lead the policy program—driving policy creation, revision, and cross-functional review cycles to keep the security policy set current, enforceable, and audit-ready.</li> <li data-section-id="1wdqpxi" data-start="896" data-end="1013">Support compliance scaling as additional products or business units pursue readiness assessments and certification.</li> <li data-section-id="xka45v" data-start="1014" data-end="1161">Support the internal audit function, partnering with internal or third-party resources as needed to meet ISO 27001's internal audit requirements.</li> <li data-section-id="rzexta" data-start="1162" data-end="1374">Partner closely with Engineering, IT, Legal, Privacy, People teams, and product leadership to gather evidence, drive control ownership, and translate compliance requirements into practical, adoptable practices.</li> <li data-section-id="1k5kwf5" data-start="1375" data-end="1504">Advise the GRC manager and broader Security leadership on audit risk, certification readiness, and compliance program strategy.</li> </ul> What you'll bring: <ul data-start="1529" data-end="2784"> <li data-section-id="6dgsxg" data-start="1529" data-end="1611">5 years of experience in information security, GRC, or compliance-focused roles.</li> <li data-section-id="13pegsv" data-start="1612" data-end="1766">Deep familiarity with ISO 27001 and SOC 2 Trust Services Criteria, gained through meaningful involvement in audits from readiness through certification.</li> <li data-section-id="4b48fa" data-start="1767" data-end="1901">Comfort operating across the full breadth of an ISMS—SoA maintenance, Management Review Meetings, and System Description authorship.</li> <li data-section-id="j69szl" data-start="1902" data-end="2063">Demonstrated experience writing and revising security policies, including running cross-functional review cycles to gain organization-wide buy-in and adoption.</li> <li data-section-id="1kjovfg" data-start="2064" data-end="2195">Experience tracking gaps and remediation plans and connecting that work to an organization's broader compliance and risk program.</li> <li data-section-id="10adpps" data-start="2196" data-end="2418">Excellent cross-functional collaboration skills—comfortable working with engineers, product managers, legal, and executive stakeholders, and able to translate compliance requirements into practical, actionable workflows.</li> <li data-section-id="1h3m5rn" data-start="2419" data-end="2495">Ability to ramp up quickly and operate with a high degree of independence.</li> <li data-section-id="1lhnckf" data-start="2496" data-end="2546">Comfort building processes where none yet exist.</li> <li data-section-id="ruv7v0" data-start="2547" data-end="2681">Strong written and verbal communication skills; ability to represent Mozilla credibly and confidently in front of external auditors.</li> <li data-section-id="1f8ymq6" data-start="2682" data-end="2784">Relevant industry certifications (e.g., CISA, CISSP, ISO 27001 Lead Auditor/Implementer) are a plus.</li> </ul> Commitment to our values: <ul data-start="2874" data-end="2978"> <li data-section-id="1s6ed8z" data-start="2874" data-end="2897">Welcoming differences</li> <li data-section-id="1fwjnc9" data-start="2898" data-end="2925">Being relationship-minded</li> <li data-section-id="1slxk8b" data-start="2926" data-end="2964">Practicing responsible participation</li> <li data-section-id="18kady7" data-start="2965" data-end="2978">Having grit</li> </ul> What you'll get: <ul data-start="3001" data-end="3640"> <li data-section-id="131m0bb" data-start="3001" data-end="3104">Generous performance-based bonus plans to all eligible employees—we share in our success as one team.</li> <li data-section-id="1tom7yi" data-start="3105" data-end="3149">Rich medical, dental, and vision coverage.</li> <li data-section-id="5ugc8y" data-start="3150" data-end="3253">Generous retirement contributions with 100% immediate vesting (regardless of whether you contribute).</li> <li data-section-id="m1g0av" data-start="3254" data-end="3330">Quarterly all-company wellness days where everyone takes a pause together.</li> <li data-section-id="mby2ad" data-start="3331" data-end="3392">Country-specific holidays plus a day off for your birthday.</li> <li data-section-id="15ntbic" data-start="3393" data-end="3424">One-time home office stipend.</li> <li data-section-id="r9ac9u" data-start="3425" data-end="3466">Annual professional development budget.</li> <li data-section-id="7ti1pq" data-start="3467" data-end="3498">Quarterly well-being stipend.</li> <li data-section-id="1htbsxd" data-start="3499" data-end="3534">Considerable paid parental leave.</li> <li data-section-id="1vv9zik" data-start="3535" data-end="3569">Employee referral bonus program.</li> <li data-section-id="1a08eks" data-start="3570" data-end="3640">Other benefits (life/AD&amp;D, disability, EAP, etc.—varies by country).</li> </ul> About Mozilla&nbsp; Mozilla exists to build the Internet as a public resource accessible to all because we believe that open and free is better than closed and controlled
When you work at Mozilla, you give yourself a chance to make a difference in the lives of Web users everywhere

How To Apply

Read the summary, experience requirement, location and deadline on this page.
Open the official application/source link for the final employer instructions.
Prepare an updated resume, education details, work samples if relevant, and identity documents only when requested by the official process.
Apply only through the official source. Do not pay registration fees or share OTPs, banking passwords or UPI PINs.

Eligibility Notes

Candidates should compare their qualification, experience, skills, location preference and availability with the official job description. If a requirement is not clearly mentioned here, treat it as employer-specific and verify it on the source page.

Candidate Guidance

Senior Security GRC Engineer at mozilla should be evaluated by matching the role title, category, location and experience requirement with your resume before applying.

Candidate fit: this IT Jobs is best for applicants who can show relevant skills, projects or work experience connected to the role.
Experience check: compare your profile with 5 yrs; if you are a fresher, highlight projects and internships, and if experienced, show measurable work outcomes.
Location/work mode: verify whether Remote is onsite, hybrid, remote, rotational shift or relocation-based on the official source page.
Application safety: use the official application/source link, avoid registration fees and do not share OTPs, bank details or original documents through unofficial channels.

Before Applying, Check

Does my resume clearly show the skills required for this role?
Have I checked the official source page for the latest eligibility and location details?
Do I understand the interview process, work mode and joining requirements?
Is the application link asking only for normal job-application information?

ManaCoding Jobs is a job-discovery platform. We organize role information and source links, but candidates should verify final details on the official employer or source page before applying. Salary is shown only when available from the listing/source; otherwise it is marked as not disclosed.