GRC Engineer

📋 Description

• Own and continuously mature the company risk register; design a risk management workflow that uses
• Lead external audit management (SOC 2 Type II); automate evidence collection pipelines in Vanta so
• Engineer the Trust and Assurance program for scale: build automated intake and triage workflows for
• Build a vendor and supply chain risk program that goes beyond static spreadsheets. Design automated
• Redesign and maintain security and privacy policies; use AI to draft, version, and track policy
• Own common controls monitoring in Vanta. Configure and tune integrations, checks, and alerting so

🎯 Requirements

• 3+ years of experience in GRC, information security compliance, or risk management.
• Working knowledge of SOC 2 (Trust Services Criteria), with hands-on experience supporting or
• Familiarity with additional frameworks is a strong plus: CIS Controls v8, NIST CSF, NIST AI RMF
• Experience conducting rapid third-party/vendor risk assessments and managing a supply chain risk
• Strong organizational skills with the ability to manage multiple concurrent workstreams and
• Excellent written communication, capable of drafting clear, audience-appropriate policy documents

🎁 Benefits

• Compensation range: $130,000-$170,000