Lead Engineer- Product GRC (SaaS -Technical Compliance & Automation)

Be the one building AI-powered experiences where they matter most.
At Genesys, we help organizations create better customer experiences through AI-powered experience orchestration. Our platform connects people, systems, data and AI to help organizations deliver more personalized service, improve operational efficiency and build stronger customer relationships.
Help build, support and operate technology used by more than 8,000 organizations in over 100 countries – moving AI from possibility to production in real-world enterprise environments every day.
Job Title: Lead Engineer - Product GRC (SaaS -Technical Compliance & Automation)
Location: Budapest / Remote Hungary
At Genesys, we allow our employees to make their mark by entrusting them to make decisions and do what they’ve been hired to do: their very best. Your potential is waiting; why are you?
About Genesys
Every year, Genesys orchestrates billions of remarkable customer experiences for organizations in more than 100 countries. Through the power of our cloud, digital and AI technologies, organizations can realize Experience as a Service™ our vision for empathetic customer experiences at scale. With Genesys, organizations have the power to deliver proactive, predictive, and hyper personalized experiences to deepen their customer connection across every marketing, sales, and service moment on any channel, while also improving employee productivity and engagement. By transforming back-office technology to a modern revenue velocity engine Genesys enables true intimacy at scale to foster customer trust and loyalty. With a strong track record of innovation and a never-ending desire to be first, Genesys is named as a leader in The 2023 Gartner® Magic Quadrant™ for CCaaS.
About the Role
As the Lead Engineer– Product GRC, you will be a key member of the GRC working closely with the Information Security and Privacy team responsible for driving governance, risk, and compliance (GRC) programs across our product and cloud environments, applying industry best practices.
You’ll act as the bridge between security, engineering, product, and legal / privacy teams, ensuring that governance controls and risk management practices are seamlessly embedded into how the company builds, operates, and delivers its products.
This role suits an experienced GRC professional with solid, hands-on experience running compliance and risk programs, who can translate regulatory and framework requirements into practical, scalable controls grounded in industry best practices.
Major Responsibilities/Activities
Key Responsibilities
1. Governance, Risk & Compliance
Proactively evaluate and advise the business on new and evolving certification programs, regulatory requirements, and technologies.
Own the GRC roadmap for SaaS operations, aligning with frameworks and standards and regulatory requirements like SOC 2, ISO 27001, ISO 42001, NIST CSF, HIPAA, HITRUST, ENS, HDS, GDPR etc.
Design and implement scalable compliance workflows and processes that support cloud and product operations, in line with industry best practices.
Collaborate with Legal, Privacy, and Security Engineering to ensure controls support regulatory, contractual, and data privacy requirements.
Develop and maintain policies, standards, and risk frameworks that reflect both business needs and evolving threat landscapes.
2. Technical Compliance & Automation
Lead the automation of evidence collection, control testing, and compliance monitoring using GRC and workflow management tools.
Work with engineering and product teams to embed compliance checks into the software development lifecycle, applying policy-as-code and other industry best practices where appropriate.
Conduct compliance validation of product and cloud architecture, access management, data protection, and logging controls.
Build and maintain dashboards and KPIs for continuous visibility into compliance posture.
3. Risk Management
Conduct and automate risk assessments, control effectiveness reviews, and technical remediation tracking.
Implement and manage continuous control monitoring (CCM) for real-time risk identification.
Collaborate with product and engineering teams to perform technical risk reviews during product design and deployment.
4. Audit & Assurance
Serve as the technical SME for external audits and certification processes (SOC 2, ISO 27001, PCI-DSS, HIPAA, HDS, ENS, ISO 42001 etc.).
Manage audit evidence preparation, ensuring traceability from policies to controls and technical implementation.
Lead post-audit reviews and ensure timely closure of findings.
5. Cross-Functional Enablement
Mentor junior GRC and security analysts on automation tools and control implementation best practices.
Partner with engineering and product teams to drive a strong culture of compliance and risk awareness.
Collaborate closely with privacy and data protection officers on compliance alignment
Qualifications
1. Education & Experience
Bachelor’s or Master’s degree in Information Security, Risk Management, Computer Science, or a related field.
8–12 years of experience in information security, GRC, or product/technology compliance, with solid hands-on experience running GRC programs in SaaS or technology environments.
Proven, hands-on experience designing and operating compliance programs aligned with industry best practices for SaaS or multi-tenant technology platforms.
2. Certifications (Preferred)
CISSP, CISM, CRISC, or CISA
ISO 27001 Lead Auditor/Implementer
Cloud certifications such as AWS Certified Security – Specialty, Azure Security Engineer Associate, or CCSP are highly preferred.
Core Expertise Solid understanding of security and risk concepts, including access management, data protection, and encryption standards and other domains.
Familiarity with automation and scripting concepts (e.g., Python) is a plus but not required.
General familiarity with modern DevOps/DevSecOps practices is a plus, though deep tooling expertise is not required.
Hands-on experience with GRC platforms and compliance tools, applied per industry best practices
undefined
3. Soft Skills
Strong communication and stakeholder management skills.
Analytical thinker with the ability to translate compliance requirements into technical reality.
Influencer who can lead without direct authority in a cross-functional setting.
Why This Role Matters
In a fast-scaling SaaS environment, compliance is not just a checkbox—it’s a differentiator.
The Lead Engineer – Product GRC ensures our customers, auditors, and partners trust that compliance is embedded in our DNA, applying industry best practices to keep our products secure, compliant, and scalable.
Benefits
Stability of a multinational company and the flexibility/speed of a startup company.
The warmest of welcomes: we will make sure you feel part of the Genesys team from day 1.
Keep you in the loop: Complete support and transparency from our global/local leaders.
An A-team: Talented and experienced professionals you can grow professionally with.
An open & inclusive community.
Career development: We will support your professional growth because your goals are important to us.
Flexibility: we are open to candidates being eventually office based in Budapest, remote workers long term or a mix of both, but Hungary based.
Empathy: your well-being is our priority. You will have extra days off in August and October, and extra time off to volunteer to help a cause close to your heart.
Cafeteria, health insurance, life insurance, learning center to improve yourself, language courses, gym, vitamin bar, company cafe with our own barista.
And a fabulous new HQ from near Nyugati Railway Station at Budapest.
Working at Genesys
AI at enterprise scale – Build, support and operate AI-powered technology used by more than 8,000 organizations worldwide. 150+ new AI features were released in the last fiscal year.
A flexible-first culture – Join a global team of nearly 7,000 employees with flexible ways of working designed to help people do their best work.
Growth in the AI era – Build future-ready skills through mentorship, learning programs, leadership development and education support.
Time to recharge and give back – Benefits include paid volun