Senior GRC Engineer
Core
Building the technical foundation of a modern GRC program and governing agentic systems using policy-as-code and automation.
Role type
Senior GRC Engineer (AI-native)
Builds
Policy-as-code frameworks, automated evidence pipelines, and operational risk data models.
Domain
Information Security, Governance, Risk, and Compliance (GRC) for AI/Agentic systems.
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
GRC program ownership, Python coding, API integration, cloud evidence extraction, TPRM program design, SOC 2/ISO 27001/SOX compliance, quantitative risk analysis (FAIR), AI tool proficiency, policy-as-code implementation.
Preferred skills
Agentic workflow design, NIST AI RMF expertise, GDPR/CCPA privacy crossover, full SOC 2 Type 2/ISO 27001 certification from scratch.
Technologies
Git, Python, LLMs, agentic systems, cloud environments, GRC platforms.
Responsibilities
Define governance policies for agentic systems, automate evidence collection and control testing, build policy-as-code frameworks, drive SOC 2/ISO 27001/SOX audits, build operational risk functions, mature TPRM programs, and partner with cross-functional teams.
Seniority
Senior, hands-on IC
