GRC Engineer (Governance Risk and Compliance)

The posting, as Coterie wrote it

Who we are

Through a partnership-based approach, Coterie helps insurance professionals unlock untapped revenue in the small commercial space. With an innovative quoting platform that delivers accurate pricing and bindable quotes in less than one minute, Coterie makes small business insurance effortless.

We are on a mission to build and foster a world-class team to bring speed, simplicity, and service to commercial insurance. We value integrity, humility, passion, and intelligence. If you want to push yourself and reshape a $200B+ market, we’re excited to talk to you!

Position Summary

Coterie's GRC team is seeking a GRC Engineer to help build, test, and improve how we manage and validate security, technology, and compliance controls. This hands-on technical role focuses on continuous control monitoring, application and technology control testing, risk evaluation, and the collection and validation of audit evidence directly from source systems.
The ideal candidate combines a strong understanding of risk and controls with the technical ability to work directly with systems and data. You will build and perform control testing, identify control and process gaps, assess associated risk, and recommend practical remediation or compensating controls. You will also support broader GRC initiatives, including risk management, BC/DR, privacy, and other program priorities as needed.

Key Responsibilities

Control Monitoring & Testing

• Build and maintain repeatable testing and monitoring processes for security, technology, and application controls.
• Define how controls will be tested, including testing procedures, evidence requirements, frequency, expected results, and exception criteria.
• Perform control testing to assess design and operating effectiveness and document testing procedures, results, and conclusions.
• Identify control failures, process gaps, control drift, and evidence deficiencies, and assess the related risk and compliance impact.
• Investigate the cause of identified deficiencies and work with control owners to develop practical remediation or compensating controls.
• Design and implement practical solutions to automate evidence collection, control testing, and continuous monitoring using queries, scripts, APIs, integrations, and GRC tooling where appropriate.

Technical Evidence & Audit Support

• Retrieve evidence directly from applications and source systems on behalf of control owners for audits, assessments, and control testing.
• Build and document repeatable procedures for collecting and validating technical evidence, including system reports, configurations, access data, logs, vulnerability results, and change records.
• Validate the completeness, accuracy, scope, and reliability of system-generated evidence and data used for testing and audits.
• Support SOC 2, ITGC/SOX readiness, NYDFS, and other audit and compliance activities, including walkthroughs, evidence requests, testing, and auditor follow-up.
• Mainta

[…]
nce, followed by a 1-hour project deep-dive interview with the hiring manager and additional team members, as well as 1:1 interviews with selected team members. This series is expected to be approximately 2 hours in total and can be scheduled over a few days for flexibility.

• Phase 4: Final candidates will be invited to a 30-minute final interview with a member of our senior leadership team.

What's in it for you

Coterie has excellent benefits for all full-time employees. We offer the following:

• 100% remote
• Health insurance through Aetna (we pay 100% of premiums)
• Dental and vision insurance through Guardian (we pay 100% of premiums)
• Basic life insurance (we pay 100% of premiums)
• Access to flexible spending account (FSA) or health savings account (HSA) (for those using HSA eligible plans)
• 401K plan (up 4% match with immediate vest). Must be 21 years of age or older to participate
• Flexible PTO policy offering employees up to 4 weeks of PTO in their first 12 months. Thereafter, PTO usage aligns with company standards and typically does not exceed 5 weeks per calendar year.
• 12 company-paid holidays each year
• Continuing education annual stipend
• Annual salary estimated between $115,000-$140,000 based on national data. Candidates who meet all the minimum requirements and possess additional relevant experience, as outlined in the job description, may be considered for a salary above the midpoint of the above range. Salary is based on internal equity; internal salary ranges; market data/ranges; applicant’s skills; prior relevant experience; degrees or certifications, etc.

Work Authorization

At this time, Coterie Insurance is unable to consider candidates who require current or future visa sponsorship. Applicants must have authorization to work in the United States without the need for sponsorship now or in the future. Falsification of an application, including work authorization status, is immediate grounds for dismissal from consideration.