Security GRC Engineer
Core
Build and scale the technical backbone of security and compliance programs by translating control requirements into concrete technical and operational controls, automating evidence collection, and partnering with engineering to ensure controls fit how software is built.
Role type
Senior hands-on Security GRC Engineer (Compliance Engineering)
Builds
Automated evidence collection systems, control testing workflows, and a unified control mapping system across frameworks.
Domain
SaaS, Cloud Security, AI Governance, Legal Tech
Required skills
Security GRC, Cloud Security, Infrastructure as Code (Terraform, Kubernetes), API/Scripting for automation, SQL, Vulnerability Management, Audit Readiness, Risk Assessment, Technical Writing, Cross-functional Collaboration
Preferred skills
Azure/AWS Security, Identity Platforms (Okta/Auth0), SIEM, SAST/SCA, Compliance-as-Code, AI/ML Governance (ISO 42001), FedRAMP/NIST 800-53, Fortune 500 Security Diligence
Technologies
Terraform, Kubernetes, CI/CD, IAM, SQL, APIs, SIEM, SAST/SCA, Okta, Auth0
Responsibilities
Translate SOC 2, ISO 27001, HIPAA, and AI governance requirements into technical controls; Automate evidence collection and control testing; Partner with Engineering to design and implement controls; Drive audit readiness and remediate findings; Manage control mappings, risks, and exceptions; Support security reviews and customer trust programs; Collaborate on AI governance and model inventory.
Seniority
Senior, hands-on IC
