Security GRC Engineer
Listed by employer · Checked
Posted within 60 days ·
- Work arrangement
- onsite
- Employment
- FullTime
- Stated compensation
- Not specified
Does the location policy fit?
Choose where you would work from. We’ll compare it with the posting’s stated requirements.
Choose a country to check geographic compatibility. The source requirements are available below.
This checks the posting’s stated requirements, not your legal right to work. Confirm details with the employer.
Requirements
1 with evidence8 unclear or unstated- Remote policy
- onsite
“Provider workplace type: onsite”
From employer posting metadata - Employment type
- FullTime
9 fields not stated in this posting
- Employer sponsorship
- Not specified
- Geographic scope
- Not specified
- Degree requirement
- Not specified
- Security clearance
- Not mentioned
- Timezone / hours
- Not specified
- Citizenship requirement
- Not mentioned
- Minimum experience (years)
- Not specified
- Work authorization
- Not specified
- Compensation
- Not specified
These details were not stated in the tracked posting. Confirm with the employer.
Original job description
Reading view uses normalized posting text so exact evidence excerpts can be highlighted.
Show less description
Original formatting and links
Our mission is to automate coding. The first step in our journey is to build the best tool for professional programmers, using a combination of inventive research, design, and engineering. Our organization is very flat, and our team is small and talent dense. We particularly like people who are truth-seeking, passionate, and creative. We enjoy spirited debate, crazy ideas, and shipping code.
About the Role
Security GRC Engineers design, implement, and scale our governance, risk, and compliance (GRC) program. You'll lead automation of compliance workflows, build self-serve tools to enable GTM teams, and ensure our products and infrastructure meet the highest security standards. This role blends technical implementation with strategic program development, directly shaping how we build trust with customers.
You may be a fit if
You have experience with GRC frameworks such as SOC 2, ISO 27001, ISO 42001, and AIUC-1.
You're comfortable tracing an external claim back to how the product and infrastructure are actually configured — you use coding agents and curiosity to confirm that what we say is what we do, flag issues that affect the security and AI governance program, and drive them to the right outcome.
You have strong cross-functional collaboration skills, especially with Engineering, Legal, GTM, Trust & Safety, auditors, and regulators.
Sample projects include
Automate evidence gathering and continuous control testing.
Own the relationship with audit firms and customers — you're the person who explains the security and AI governance program and earns their trust in it.
Conduct security compliance reviews for new products, features, and vendors.
Support Legal in contract negotiations with timely, accurate guidance on security and AI governance terms.
Support incident response communications — draft and review customer-facing updates during security incidents.
Build self-serve documentation and tools to answer customer security and AI governance inquiries.
Maintain corporate security policies.
Applying
If there appears to be a fit, we'll reach out to schedule 2–3 short technicals. After that, we'll schedule an onsite at our office, where you'll work on a small project, discuss ideas, and meet the team.
Matched by role category. Review each posting’s requirements before applying.