<div><div>Enphase Energy is a global energy technology company and a leading provider of solar, battery, and electric vehicle charging products. Founded in 2006, our innovative microinverter technology revolutionized solar power, making it a safer, more reliable, and scalable energy source. Today, the Enphase Energy System enables users to make, use, save, and sell their own power. Enphase is also one of the most successful and innovative clean energy companies in the world, with more than 80 million products shipped across 160 countries. <br>  <br>Join our dynamic teams designing and developing next-gen energy technologies and help drive a sustainable future!</div><div> </div><div>This role at Enphase requires working onsite <strong>3 days a week</strong>, with plans to transition back to a full 5 day in office schedule over time.</div></div><div> </div><div><strong>About the role</strong></div><div>Enphase Energy’s Information Security (InfoSec) organization is a growing collaborative team focused on protecting Enphase’s data and technology assets from cyber risks and threats, internal and external, while driving a security culture into the business use of IT. This is our team mission, and we are passionate about it. The InfoSec organization provides information- and cyber-security services to Enphase’s businesses and our goal is to provide safe, secure, and resilient IT services to our stakeholders. </div><div>A key part of achieving that goal is providing modern and comprehensive GRC (Governance, Risk and Compliance) to support Compliance Program areas, Legal and Regulatory processes, risks, and controls and provide oversight to ensure internal standards and applicable regulatory requirements are satisfied. Enphase’s IT Security GRC Team will perform periodic testing, monitoring, and validation of business controls for compliance with applicable laws and regulations. </div><div>To achieve these objectives, the InfoSec organization is looking for a GRC expert to drive the GRC program. </div><div> </div><div><strong>What you will be doing</strong></div><ul><li>Manage end-to-end Enphase SOC2 Type2 audit requirements and recurring compliance activities</li><li>Handling SOX ITGC audit activities including the new SEC Cyber Security Requirements</li><li>Work with the Internal Audit Team to address IT control gap and manage risk</li><li>Conduct security reviews of internal systems and identify areas of improvement</li><li>Manage the Governance part of Vulnerability Management. Collaborate with teams on vulnerability remediation</li><li>Identify and report new IS risks in the IS Risk Registers on a continuous basis. Report top risks to the management</li><li>Perform Vendor Security Review for new and existing vendors. Review Vendor agreements for Information Security related clauses</li><li>Create, Update, and enforce IS Policies and Procedures. Track policy compliance across the organization and conduct policy awareness sessions</li><li>Create and maintain an information security dashboard on in-house analytics tool</li><li>Drive Identity and Access Management review for critical apps</li><li>Provide periodic updates to internal stakeholders on adherence to IS compliance requirements </li><li>Collaborate with SecOps, Security Engineering and Product Security Team to prioritize and address security gaps</li></ul><div><strong>Who you are and what you will be doing</strong></div><ul><li>3+ yrs of experience in IS GRC focusing on regulatory compliance</li><li>In depth understanding of security standards and frameworks (E.g. ISO 27001, NIST CSF, PCI DSS, SOX 404, SOC2, NIS2 and PCI DSS</li><li>Should be a Graduate – B.E/ B.Tech with specialization in Computer Science, IT, IS/Cyber Security, or relevant IT-related fields</li><li>Should have scored 70% and above in 10th, 12th, and Graduation</li><li>Knowledge of Python or similar scripting language. Knowledge of PySpark or SparkSQL is an added advantage </li><li>Excellent Data Analysis and Presentation skills using Microsoft Excel and PowerPoint</li><li>Certifications (Preferred): CompTIA Security+, CISA (not mandatory)</li><li>Highly responsive and proven professionalism in communication, interpersonal, analytical, and organizational skills</li><li>Ability to synthesize a variety of data points, problem-solve, and formulate comprehensive and effective execution and risk mitigation plans</li></ul><p>Desired Skill and Experience</p><ul><li>High degree of creativity and “out-of-the-box” thinking. </li><li>Able to execute multiple projects simultaneously in fast-paced environments. </li><li>Ability to share knowledge and collaborate by developing content and documentation for distribution to other team members, managers, and customers. </li><li>Ability to work in a fast-paced, collaborative, and ever-changing global environment. </li><li>Takes responsibility and achieves results. </li><li>Must be extremely flexible and able to manage multiple tasks and priorities on very tight deadlines. </li><li>Outstanding organization skills. </li></ul><div> </div>

At Enphase, we think big. We’re on a mission to bring solar energy to the next level, one where it’s ready to meet the energy demands of an entire globe. As we work towards our vision for a solar-powered planet, we never lose sight of the three commitments that have guided us from the beginning: innovation, quality, and responsibility.
We’ve always pushed the boundaries of solar technology, ever since our founders took one look at a string inverter and knew they could do better. We’re still at it. We’re passionate about developing new technologies that make energy more intelligent, more connected, and more cost effective than ever before.

Mission
To deliver technology solutions that make clean energy affordable, reliable and accessible to all.

Values
We are experts in our discipline and love what we do
We are passionate about winning
We have high aspirations and set bold goals
We are enthusiastic about delivering the best customer experience
We are open, honest, transparent and respectful with our colleagues

Vision
The world's leading clean energy solution provider

We're changing energy. Come join us.

GRC Engineer

<div><div>Enphase Energy is a global energy technology company and a leading provider of solar, battery, and electric vehicle charging products. Founded in 2006, our innovative microinverter technology revolutionized solar power, making it a safer, more reliable, and scalable energy source. Today, the Enphase Energy System enables users to make, use, save, and sell their own power. Enphase is also one of the most successful and innovative clean energy companies in the world, with more than 80 million products shipped across 160 countries.&nbsp;<br>&nbsp;&nbsp;<br>Join our dynamic teams designing and developing next-gen energy technologies and help drive a sustainable future!</div><div>&nbsp;</div><div>This role at Enphase requires working onsite <strong>3 days a week</strong>, with plans to transition back to a full 5 day in office schedule over time.</div></div><div>&nbsp;</div><div><strong>About the role</strong></div><div>Enphase Energy’s Information Security (InfoSec) organization is a growing collaborative team focused on protecting Enphase’s data and technology assets from cyber risks and threats, internal and external, while driving a security culture into the business use of IT. This is our team mission, and we are passionate about it. The InfoSec organization provides information- and cyber-security services to Enphase’s businesses and our goal is to provide safe, secure, and resilient IT services to our stakeholders.&nbsp;</div><div>A key part of achieving that goal is providing modern and comprehensive GRC (Governance, Risk and Compliance) to support Compliance Program areas, Legal and Regulatory processes, risks, and controls and provide oversight to ensure internal standards and applicable regulatory requirements are satisfied. Enphase’s IT Security GRC Team will perform periodic testing, monitoring, and validation of business controls for compliance with applicable laws and regulations.&nbsp;</div><div>To achieve these objectives, the InfoSec organization is looking for a GRC expert to drive the GRC program.&nbsp;</div><div>&nbsp;</div><div><strong>What you will be doing</strong></div><ul><li>Manage end-to-end Enphase SOC2 Type2 audit requirements and recurring compliance activities</li><li>Handling SOX ITGC audit activities including the new SEC Cyber Security Requirements</li><li>Work with the Internal Audit Team to address IT control gap and manage risk</li><li>Conduct security reviews of internal systems and identify areas of improvement</li><li>Manage the Governance part of Vulnerability Management. Collaborate with teams on vulnerability remediation</li><li>Identify and report new IS risks in the IS Risk Registers on a continuous basis. Report top risks to the management</li><li>Perform Vendor Security Review for new and existing vendors. Review Vendor agreements for Information Security related clauses</li><li>Create, Update, and enforce IS Policies and Procedures. Track policy compliance across the organization and conduct policy awareness sessions</li><li>Create and maintain an information security dashboard on in-house analytics tool</li><li>Drive Identity and Access Management review for critical apps</li><li>Provide periodic updates to internal stakeholders on adherence to IS compliance requirements&nbsp;</li><li>Collaborate with SecOps, Security Engineering and Product Security Team to prioritize and address security gaps</li></ul><div><strong>Who you are and what you will be doing</strong></div><ul><li>3+ yrs of experience in IS GRC focusing on regulatory compliance</li><li>In depth understanding of security standards and frameworks (E.g. ISO 27001, NIST CSF, PCI DSS, SOX 404, SOC2, NIS2 and PCI DSS</li><li>Should be a Graduate – B.E/ B.Tech with specialization in Computer Science, IT, IS/Cyber Security, or relevant IT-related fields</li><li>Should have scored 70% and above in 10th, 12th, and Graduation</li><li>Knowledge of Python or similar scripting language. Knowledge of PySpark or SparkSQL is an added advantage&nbsp;</li><li>Excellent Data Analysis and Presentation skills using Microsoft Excel and PowerPoint</li><li>Certifications (Preferred): CompTIA Security+, CISA (not mandatory)</li><li>Highly responsive and proven professionalism in communication, interpersonal, analytical, and organizational skills</li><li>Ability to synthesize a variety of data points, problem-solve, and formulate comprehensive and effective execution and risk mitigation plans</li></ul><p>Desired Skill and Experience</p><ul><li>High degree of creativity and “out-of-the-box” thinking.&nbsp;</li><li>Able to execute multiple projects simultaneously in fast-paced environments.&nbsp;</li><li>Ability to share knowledge and collaborate by developing content and documentation for distribution to other team members, managers, and customers.&nbsp;</li><li>Ability to work in a fast-paced, collaborative, and ever-changing global environment.&nbsp;</li><li>Takes responsibility and achieves results.&nbsp;</li><li>Must be extremely flexible and able to manage multiple tasks and priorities on very tight deadlines.&nbsp;</li><li>Outstanding organization skills.&nbsp;</li></ul><div>&nbsp;</div>

GRC Engineer

About the Job

About the Company

EnPhase Energy

Similar Jobs

SOC Engineer

SOC Engineer

Senior Security Engineer

Senior Security Engineer

Cybersecurity GRC Analyst | Digital Infrastructure

Cybersecurity GRC Analyst | Digital Infrastructure

Cybersecuity GRC Analyst

Cybersecuity GRC Analyst

Senior Engineer - DevSecops

Senior Engineer - DevSecops

IAM Engineer

IAM Engineer

Security Analyst

Security Analyst

Senior Application Security Engineer (Hybrid - US)

Senior Application Security Engineer (Hybrid - US)

Senior GRC Analyst

Senior GRC Analyst

Information Security Analyst (GRC)

Information Security Analyst (GRC)