Senior Risk & Governance Engineer

📋 Description

• Design, build, and maintain automated compliance testing pipelines that continuously validate
• Replace point-in-time manual evidence collection with always-on automated checks, pulling evidence
• Own the technical configuration and integration of the GRC platform (Drata or equivalent), building
• Develop and deploy AI-assisted workflows for evidence summarization, control narrative drafting
• Own the governance framework for AlphaSense's AI and agentic systems, defining policies, control
• Build the policy program as code with policies in version control, peer-reviewed, with requirements

🎯 Requirements

• 6+ years of experience in GRC, information security, risk management, or IT audit, preferably in a
• Strong understanding of security and compliance frameworks including SOC 2, ISO 27001, NIST CSF
• AI-native mindset: you use AI tools—LLMs, agents, automation—for real, substantive work including
• Write effective Python code that can call APIs, build integrations, schedule jobs, and deploy a
• Hands-on experience implementing automated control collection and continuous control
• Hands-on experience building GRC platform integrations via APIs or native connectors, and direct