GRC Engineer
Posted Updated
Summary
Runs governance, risk, and compliance operations: performing risk assessments, driving continuous compliance and real-time audit readiness, handling third-party/vendor risk reviews, and maintaining security policies — with a strong focus on automating control monitoring and evidence collection using scripting and AI-agent tooling.
You will run governance, risk, and compliance operations, including risk assessments, continuous compliance, control monitoring, evidence collection, vendor reviews, and security policy updates. You will automate workflows, maintain audit readiness, support AI governance, and strengthen security controls with risk owners.
Responsibilities
- Perform risk assessments and drive continuous compliance programs
- Automate control monitoring and evidence collection
- Complete third-party security reviews
- Maintain the risk register and drive risk remediation and mitigation
- Own the third-party risk-management lifecycle
- Establish continuous compliance workflows and real-time audit readiness
- Administer GRC platforms with an emphasis on automation and scalability
- Support AI governance through practical controls, assessments, and evidence
- Maintain security policies and standards
Requirements
- Bachelor's or Master's degree in Information Security, Computer Science, Engineering, or a related field
- 5–8 years of security GRC, risk management, or compliance-program ownership experience
- Active security certification such as CISSP, CISA, CISM, AIGP, or ISO 27001 Lead Auditor
- Experience building scalable GRC automations with AI agents, custom tooling, or scripting
- Organizational skills for managing multiple priorities under deadlines
- Written and verbal communication skills with technical execution rigor
Benefits
- Equity
- Health insurance
- Dental insurance
- Vision insurance
- Life insurance
- Disability insurance
- 401k retirement benefits with employer match
- Learning stipends
- Wellness stipends
- Paid time off