or apply directly on Mozilla's site. We never take the application ourselves.
Is this posting real?
- This role has been open
- 72 days Mozilla's roles stay open a median of 59 days
- Reposted
- No
- Salary listed
- No 20% of Mozilla's roles list one
- Ghost-job risk at Mozilla
- high 71 stale, 3 reposted of 76 open
- Hiring momentum
- 159 roles opened in the last 90 days ↑ up vs. the prior 90 days
- Last confirmed on the employer's board
- 2026-10-23
Measured from postings appearing on and disappearing from Mozilla's own greenhouse board since 2026-08-03. Full hiring picture for Mozilla.
About this role
The Senior Security GRC Engineer at Mozilla will be responsible for maintaining and advancing the Information Security Management System (ISMS) and supporting compliance programs such as ISO 27001 and SOC 2 Type 2. Daily tasks include managing audit processes, leading policy programs, tracking compliance gaps, and collaborating with various teams to ensure security policies are current and enforceable.
- benefits
- 5/5
- freshness
- 1/5
- career value
- 4/5
- role clarity
- 4/5
- pay transparency
- 0/5
Scored from the posting itself — how clearly the role is described, how much it says about pay and benefits, and how recently it was listed. Not a judgement of Mozilla as an employer.
What you need
- 5 years of experience in information security, GRC, or compliance-focused roles
- Deep familiarity with ISO 27001 and SOC 2 Trust Services Criteria
- Experience with ISMS maintenance, Management Review Meetings, and System Description authorship
- Demonstrated experience writing and revising security policies
- Experience tracking gaps and remediation plans
- Excellent cross-functional collaboration skills
Nice to have
- Relevant industry certifications (e.g., CISA, CISSP, ISO 27001 Lead Auditor/Implementer)
What you get
- Generous performance-based bonus plans
- Rich medical, dental, and vision coverage
- Generous retirement contributions with 100% immediate vesting
- Quarterly all-company wellness days
- Country-specific holidays plus a day off for your birthday
- One-time home office stipend
Worth weighing
- No specific mention of remote work challenges or team dynamics
- The role requires building processes where none exist, which may involve ambiguity
- The position involves significant cross-functional collaboration, which may vary in complexity depending on team engagement
Summarised from Mozilla's posting. Read the full original.
Listed by Mozilla on their greenhouse job board, last confirmed open on 2026-10-23. PitchMeAI is not the employer.
More roles at Mozilla
- Staff Security GRC EngineerRemote
- Staff Security GRC EngineerRemote Germany
- Staff Security GRC EngineerRemote US
- Staff Security GRC EngineerRemote France
- Staff Security GRC EngineerRemote UK
- Senior Solutions Engineer (DACH), Firefox EnterpriseRemote Germany
- Staff Designer, Rapid PrototypingRemote
- Senior Mobile Engineer, iOSRemote US