GRC Engineer

📋 Description

• Own day-to-day GRC operations - including (but not limited to) performing risk assessments, driving
• Perform and improve security risk assessments, maintain the risk register, partner with risk owners
• Own the third-party risk management lifecycle, including vendor intake, risk-based tiering
• Establish automated control monitoring systems and continuous compliance workflows to maintain
• Administer GRC platforms (e.g., Vanta, Anecdotes, Drata, OneTrust) with a focus on automation and
• Support AI governance initiatives aligned with ISO 42001 and NIST AI RMF, translating requirements

🎯 Requirements

• Bachelor’s or Master’s in Information Security, Computer Science, Engineering, or a related field
• 5–8 years of experience in security GRC, risk management, or compliance program ownership
• Active security certification (e.g. CISSP, CISA, CISM, AIGP, ISO 27001 Lead Auditor)
• Proven experience building scalable GRC automations using AI agents, custom tooling, or scripting
• Strong organizational skills and ability to manage multiple priorities under tight deadlines
• Strong written and verbal communication skills with technical execution rigor

🎁 Benefits

• Base salary, equity, and benefits
• Comprehensive health, dental, vision, life and disability insurance coverage
• 401k retirement benefits with employer match
• Learning and wellness stipends
• Paid time off