<div><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Enphase Energy is a global energy technology company and leading provider of solar, battery, and electric vehicle charging products. Founded in 2006, Enphase transformed the solar industry with our revolutionary microinverter technology, which turns sunlight into a safe, reliable, resilient, and scalable source of energy to power our lives. Today, the Enphase Energy System helps people make, use, save, and sell their own power. Enphase is also one of the fastest growing and innovative clean energy companies in the world, with approximately 68 million products installed across more than 145 countries.  </span></div><div><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">We are building teams that are designing, developing, and manufacturing next-generation energy technologies and our work environment is fast-paced, fun and full of exciting new projects.  </span></div><div><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">If you are passionate about advancing a more sustainable future, this is the perfect time to join Enphase! </span></div><div><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;"> </span></div><div><strong><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">About the role: </span></strong></div><div><strong><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;"></span></strong></div><div><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Enphase Energy’s Information Security (InfoSec) organization is a growing collaborative team focused on protecting Enphase’s data and technology assets from cyber risks and threats, internal and external, while driving a security culture into the business use of IT. This is our team mission, and we are passionate about it. The InfoSec organization provides information- and cyber-security services to Enphase’s businesses and our goal is to provide safe, secure, and resilient IT services to our stakeholders. </span></div><div><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">A key part of achieving that goal is providing modern and comprehensive GRC (Governance, Risk and Compliance) to support Compliance Program areas, Legal and Regulatory processes, risks, and controls and provide oversight to ensure internal standards and applicable regulatory requirements are satisfied. Enphase’s IT Security GRC Team will perform periodic testing, monitoring, and validation of business controls for compliance with applicable laws and regulations. </span></div><div><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">To achieve these objectives, the InfoSec organization is looking for a GRC expert to drive the GRC program. </span></div><div><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;"> </span></div><div><b><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Key Responsibilities: </span></b><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;"> </span></div><ul style="margin-top:0.0px;"><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Manage end-to-end Enphase SOC2 Type2 audit requirements and recurring compliance activities. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Handling SOX ITGC audit activities including the new SEC Cyber Security Requirements. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Work with the Internal Audit Team to address IT control gap and manage risk. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Conduct security reviews of internal systems and identify areas of improvement. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Manage the Governance part of Vulnerability Management. Collaborate with teams on vulnerability remediation. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Identify and report new IS risks in the IS Risk Registers on a continuous basis. Report top risks to the management. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Perform Vendor Security Review for new and existing vendors. Review Vendor agreements for Information Security related clauses. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Create, Update, and enforce IS Policies and Procedures. Track policy compliance across the organization and conduct policy awareness sessions. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Create and maintain an information security dashboard on in-house analytics tool. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Drive Identity and Access Management review for critical apps. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Provide periodic updates to internal stakeholders on adherence to IS compliance requirements </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Collaborate with SecOps, Security Engineering and Product Security Team to prioritize and address security gaps. </span></li></ul><div><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;"> </span></div><div><b><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Required Skill and Experience: </span></b><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;"> </span></div><ul style="margin-top:0.0px;"><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">3-5 yrs of experience in IS GRC focusing on regulatory compliance. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">In depth understanding of security standards and frameworks (E.g. ISO 27001, NIST CSF, PCI DSS, SOX 404, SOC2, NIS2 and PCI DSS.   </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Should be a Graduate – B.E/ B.Tech with specialization in Computer Science, IT, IS/Cyber Security, or relevant IT-related fields. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Should have scored 70% and above in 10th, 12th, and Graduation.  </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Knowledge of Python or similar scripting language. Knowledge of PySpark or SparkSQL is an added advantage. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Excellent Data Analysis and Presentation skills using Microsoft Excel and PowerPoint. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Certifications (Preferred): CompTIA Security+, CISA (not mandatory)</span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Highly responsive and proven professionalism in communication, interpersonal, analytical, and organizational skills. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Ability to synthesize a variety of data points, problem-solve, and formulate comprehensive and effective execution and risk mitigation plans. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Desired Skill and Experience: </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">High degree of creativity and “out-of-the-box” thinking. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Able to execute multiple projects simultaneously in fast-paced environments. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Ability to share knowledge and collaborate by developing content and documentation for distribution to other team members, managers, and customers. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Ability to work in a fast-paced, collaborative, and ever-changing global environment. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Takes responsibility and achieves results. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Must be extremely flexible and able to manage multiple tasks and priorities on very tight deadlines. </span></li><li><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;">Outstanding organization skills. </span></li></ul><div><span style="font-size:10.0pt;line-height:115.0%;font-family:'Open Sans' , sans-serif;"> </span></div>

At Enphase, we think big. We’re on a mission to bring solar energy to the next level, one where it’s ready to meet the energy demands of an entire globe. As we work towards our vision for a solar-powered planet, we never lose sight of the three commitments that have guided us from the beginning: innovation, quality, and responsibility.
We’ve always pushed the boundaries of solar technology, ever since our founders took one look at a string inverter and knew they could do better. We’re still at it. We’re passionate about developing new technologies that make energy more intelligent, more connected, and more cost effective than ever before.

Mission
To deliver technology solutions that make clean energy affordable, reliable and accessible to all.

Values
We are experts in our discipline and love what we do
We are passionate about winning
We have high aspirations and set bold goals
We are enthusiastic about delivering the best customer experience
We are open, honest, transparent and respectful with our colleagues

Vision
The world's leading clean energy solution provider

We're changing energy. Come join us.

GRC Engineer

<div><span>Enphase Energy is a global energy technology company and leading provider of solar, battery, and electric vehicle charging products. Founded in 2006, Enphase transformed the solar industry with our revolutionary microinverter technology, which turns sunlight into a safe, reliable, resilient, and scalable source of energy to power our lives. Today, the Enphase Energy System helps people make, use, save, and sell their own power. Enphase is also one of the fastest growing and innovative clean energy companies in the world, with approximately 68 million products installed across more than 145 countries. &nbsp;</span></div><div><span>We are building teams that are designing, developing, and manufacturing next-generation energy technologies and our work environment is fast-paced, fun and full of exciting new projects. &nbsp;</span></div><div><span>If you are passionate about advancing a more sustainable future, this is the perfect time to join Enphase!&nbsp;</span></div><div><span>&nbsp;</span></div><div><strong><span>About the role:&nbsp;</span></strong></div><div><strong><span></span></strong></div><div><span>Enphase Energy’s Information Security (InfoSec) organization is a growing collaborative team focused on protecting Enphase’s data and technology assets from cyber risks and threats, internal and external, while driving a security culture into the business use of IT. This is our team mission, and we are passionate about it. The InfoSec organization provides information- and cyber-security services to Enphase’s businesses and our goal is to provide safe, secure, and resilient IT services to our stakeholders.&nbsp;</span></div><div><span>A key part of achieving that goal is providing modern and comprehensive GRC (Governance, Risk and Compliance) to support Compliance Program areas, Legal and Regulatory processes, risks, and controls and provide oversight to ensure internal standards and applicable regulatory requirements are satisfied. Enphase’s IT Security GRC Team will perform periodic testing, monitoring, and validation of business controls for compliance with applicable laws and regulations.&nbsp;</span></div><div><span>To achieve these objectives, the InfoSec organization is looking for a GRC expert to drive the GRC program.&nbsp;</span></div><div><span>&nbsp;</span></div><div><b><span>Key Responsibilities:&nbsp;</span></b><span>&nbsp;</span></div><ul><li><span>Manage end-to-end Enphase SOC2 Type2 audit requirements and recurring compliance activities.&nbsp;</span></li><li><span>Handling SOX ITGC audit activities including the new SEC Cyber Security Requirements.&nbsp;</span></li><li><span>Work with the Internal Audit Team to address IT control gap and manage risk.&nbsp;</span></li><li><span>Conduct security reviews of internal systems and identify areas of improvement.&nbsp;</span></li><li><span>Manage the Governance part of Vulnerability Management. Collaborate with teams on vulnerability remediation.&nbsp;</span></li><li><span>Identify and report new IS risks in the IS Risk Registers on a continuous basis. Report top risks to the management.&nbsp;</span></li><li><span>Perform Vendor Security Review for new and existing vendors. Review Vendor agreements for Information Security related clauses.&nbsp;</span></li><li><span>Create, Update, and enforce IS Policies and Procedures. Track policy compliance across the organization and conduct policy awareness sessions.&nbsp;</span></li><li><span>Create and maintain an information security dashboard on in-house analytics tool.&nbsp;</span></li><li><span>Drive Identity and Access Management review for critical apps.&nbsp;</span></li><li><span>Provide periodic updates to internal stakeholders on adherence to IS compliance requirements&nbsp;</span></li><li><span>Collaborate with SecOps, Security Engineering and Product Security Team to prioritize and address security gaps.&nbsp;</span></li></ul><div><span>&nbsp;</span></div><div><b><span>Required Skill and Experience:&nbsp;</span></b><span>&nbsp;</span></div><ul><li><span>3-5 yrs of experience in IS GRC focusing on regulatory compliance.&nbsp;</span></li><li><span>In depth understanding of security standards and frameworks (E.g. ISO 27001, NIST CSF, PCI DSS, SOX 404, SOC2, NIS2 and PCI DSS. &nbsp;&nbsp;</span></li><li><span>Should be a Graduate – B.E/ B.Tech with specialization in Computer Science, IT, IS/Cyber Security, or relevant IT-related fields.&nbsp;</span></li><li><span>Should have scored 70% and above in 10th, 12th, and Graduation. &nbsp;</span></li><li><span>Knowledge of Python or similar scripting language. Knowledge of PySpark or SparkSQL is an added advantage.&nbsp;</span></li><li><span>Excellent Data Analysis and Presentation skills using Microsoft Excel and PowerPoint.&nbsp;</span></li><li><span>Certifications (Preferred): CompTIA Security+, CISA (not mandatory)</span></li><li><span>Highly responsive and proven professionalism in communication, interpersonal, analytical, and organizational skills.&nbsp;</span></li><li><span>Ability to synthesize a variety of data points, problem-solve, and formulate comprehensive and effective execution and risk mitigation plans.&nbsp;</span></li><li><span>Desired Skill and Experience:&nbsp;</span></li><li><span>High degree of creativity and “out-of-the-box” thinking.&nbsp;</span></li><li><span>Able to execute multiple projects simultaneously in fast-paced environments.&nbsp;</span></li><li><span>Ability to share knowledge and collaborate by developing content and documentation for distribution to other team members, managers, and customers.&nbsp;</span></li><li><span>Ability to work in a fast-paced, collaborative, and ever-changing global environment.&nbsp;</span></li><li><span>Takes responsibility and achieves results.&nbsp;</span></li><li><span>Must be extremely flexible and able to manage multiple tasks and priorities on very tight deadlines.&nbsp;</span></li><li><span>Outstanding organization skills.&nbsp;</span></li></ul><div><span>&nbsp;</span></div>

GRC Engineer

About the Job

About the Company

EnPhase Energy

Similar Jobs

Senior Security Engineer

Senior Security Engineer

IT Risk Specialist

IT Risk Specialist

IT Software Engineer

IT Software Engineer

Cybersecurity GRC Analyst | Digital Infrastructure

Cybersecurity GRC Analyst | Digital Infrastructure

Cybersecuity GRC Analyst

Cybersecuity GRC Analyst

SecOps Engineer

SecOps Engineer

Security Operations Specialist

Security Operations Specialist

Product Security Intern (Munich)

Product Security Intern (Munich)

Business R&D Experienced Professional

Business R&D Experienced Professional

Security Systems Support Specialist

Security Systems Support Specialist