Senior GRC Engineer
Core
Build compliance infrastructure and AI governance automation for a specialty care platform serving 6 million members.
Role type
Senior GRC Engineer (Engineering-focused)
Builds
Automated compliance evidence pipelines, AI risk registers, and continuous control monitoring workflows
Domain
Healthcare technology / AI Governance / Cloud Security
Deliverable
production ML models | infrastructure
Required skills
Python, SQL, API integration, Cloud security controls (Azure), Continuous control monitoring, AI risk assessment, HIPAA compliance, HITRUST CSF, NIST AI RMF, Vendor risk management
Preferred skills
CISA, CRISC, CISM, CISSP, HITRUST CCSFP, LLM tool development
Technologies
Python, SQL, AWS, Azure, ServiceNow GRC, Drata, OneTrust, CI/CD pipelines
Responsibilities
Write scripts to pull evidence directly from source systems; Build and maintain continuous control monitoring workflows; Design compliance-as-code and policy-as-code approaches; Build and maintain AI risk registers and governance controls; Own HIPAA Privacy and Security compliance program; Support HITRUST CSF and SOC 2 Type II audit cycles; Build enterprise risk register with automated KRI tracking; Run third-party risk management program with continuous monitoring
Seniority
Senior, hands-on IC