Governance, Risk & Compliance (GRC) Security Engineer

Responsibilities

• Partner with stakeholders across the business to identify, assess, and drive remediation of security risks
• Support and evolve our compliance programmes (e.g. ISO 27001, SOC 2), from evidence gathering through to audit readiness and accreditation
• Design, implement, and continuously improve security controls and monitoring practices
• Build and automate GRC processes to improve efficiency, accuracy, and scalability
• Develop and maintain clear, actionable security policies, standards, and procedures
• Provide hands-on support during audits and act as a key point of contact for internal and external assessors
• Embed security into business decision-making by providing practical, risk-based guidance
• Own and mature vendor risk management across the full lifecycle
• Contribute to building a strong security culture through awareness and education initiatives

Requirements

• A pragmatic GRC practitioner who understands how to balance risk, security, and business velocity
• Experience working with security frameworks such as ISO 27001, SOC 2, HIPAA, PCI DSS, or FedRAMP
• Solid understanding of technical security controls and how they are implemented in modern systems
• Ability to write code or scripts to automate workflows, analyse data, or improve GRC processes
• Experience building dashboards or visualising data to drive insight and decision-making
• Exposure to graph technologies (e.g. Neo4j) or an interest in applying them to security and risk problems
• Strong communication skills, with the ability to influence both technical and non-technical stakeholders
• Confidence in presenting to a range of audiences, including customers and auditors
• A growth mindset and a desire to continuously improve both your craft and the way GRC is delivered
• #LI-Hybrid
• Why Join Neo4j?
• Neo4j is one of the fastest-scaling technology companies in this industry. It recently surpassed $200M in annual recurring revenue (ARR), doubling its ARR over the past three years.
• 84% of the Fortune 100 and 58% of the Fortune 500 use Neo4j. Examples include Boston Scientific , BT Group , Caterpillar , Cisco , Comcast , Department for Education UK , eBay , NBC News , Novo Nordisk , Worldline , and others .
• Co-founder and CEO Emil Eifrem has built an amazing culture that prides itself on relationships, inclusiveness, innovation, and customer success.
• Countless industry awards . Massive enterprises and individual developers/data scientists love Neo4j. A strong sense of community and ecosystem is built around the platform.
• A recent Forrester Total Economic Impac

Benefits

Additional Information

About Neo4j: Neo4j is the graph intelligence platform that transforms data into knowledge to power the next generation of intelligent applications and AI systems. It includes enterprise-ready knowledge graphs for accurate, explainable, and governed AI; the most comprehensive, trusted, and easy-to-deploy graph capabilities across any environment and data source; and an unmatched ecosystem trusted by 84 of the Fortune 100 and supported by the world's largest graph community. Intelligence that works. Results that matter. Built to work everywhere and integrate with everything across every cloud for dynamic, personalized, and autonomous AI systems. We deliver quicker results, contextual knowledge, and solutions that impact customers and employees across the business. Our Vision: At Neo4j, we have always strived to help the world make sense of data. As business, society and knowledge become increasingly connected, our technology promotes innovation by helping organizations to find and understand data relationships. We created, drive and lead the graph database category, and we're disrupting how organizations leverage their data to innovate and stay competitive. The Team: As a Governance, Risk & Compliance (GRC) Analyst, you will play a central role in shaping and strengthening our security and risk posture. You'll act as a trusted partner to teams across the business-helping them navigate security decisions, manage risk effectively, and meet compliance requirements without slowing down innovation. This is a high-impact, high-visibility role within the security team, reporting directly to the CISO. You'll work at the intersection of security, engineering, and business operations-driving pragmatic, scalable approaches to risk management and compliance.

Your Match

How well this role fits your profile.

Company Intel

What employees say

Worked at neo4j? Share your experience