GRC Engineer
Core
Build automated technical controls, tooling, and pipelines to satisfy security frameworks (SOC 2, ISO 27001, NIST) and translate compliance policies into engineering specifications.
Role type
Senior GRC Engineer (Technical Controls & Automation) (via careerplan.io/jobs/ba8037e5-a9d3-4cfe-b8ae-6bb6d817af92-grc-engineer-at-reflection)
Builds
Automated evidence collection pipelines, GRC platform integrations, and technical controls for security frameworks.
Domain
AI Governance, Cybersecurity Compliance, Cloud Infrastructure
Required skills
Python, API integrations, cloud infrastructure, identity/access management, GRC tooling, data lineage, technical due diligence
Preferred skills
SOC 2/ISO 27001/NIST implementation, CMMC, GDPR/CCPA technical requirements, TPRM platforms, government contracting environment
Technologies
Vanta, Python, SOC 2, ISO 27001, NIST 800-53/800-171, CMMC, GDPR, CCPA
Responsibilities
Design automated controls for access reviews and data minimization; Partner with Engineering/Security to implement framework requirements; Build internal tooling for compliance workflows; Translate regulatory requirements into technical specs; Support technical due diligence for audits and vendor assessments; Maintain integrations between GRC systems and source-of-truth systems.
Seniority
Mid-Senior, hands-on IC
