GRC Engineer

📋 Description

• Own and mature the company risk register with AI tooling for real-time posture.
• Lead SOC 2 Type II audits; automate evidence pipelines in Vanta.
• Engineer Trust & Assurance program for scale with AI-assisted workflows.
• Build automated vendor and supply chain risk program (intake, scoring, monitoring).
• Redesign security and privacy policies with AI-driven drafting and attestation.
• Drive always-on compliance via Vanta and automated controls monitoring.

🎯 Requirements

• 3+ years in GRC, information security, or risk management.
• Hands-on SOC 2 knowledge with audits or support.
• Familiarity with CIS Controls v8, NIST CSF, NIST AI RMF, NIST Privacy Framework, ISO 42001/27001.
• Experience conducting rapid third-party/vendor risk assessments.
• Strong organizational skills; able to manage multiple concurrent workstreams.
• Experience with Vanta (or equivalent) and AI tooling for automation.

🎁 Benefits

• Comprehensive Medical, Dental and Vision starting day 1 (80% covered).
• 401(k) with a match.
• 10 holidays, 20 vacation days, 5 sick days, 3 floating holidays.
• Basic Life and AD&D insurance fully covered.
• Short and Long Term Disability fully covered.
• Paid Family Leave and Employee Assistance Program.